Configuring flexible netflow for layer 2 traffic

[dbuckley77]

We have a layer 2 network that we're trying to configure flexible netflow for on our 2960X (mostly) switches to send to our traffic analyzer.  Basically we want to configure netflow to monitor our layer 2 trunks so we can see the bandwidth numbers on them.

I have never configured this before and the Cisco doc for doing so is a little long and cryptic.

Does anyone have a sample config they could provide?

[balaji.bandi]

Netflow is genereally used for source and destination talkers, not sure what version of IOS code running on Cat 2960X switch

if you looking to see bandwdith utilisation on trunk or ports - simple SNMP and NMS can do the work for you.

as per i know only latest IOS XE ( as i remember) can be done Layer2 netflow, if not you still need Layer 3 interface to collect netflow statistics,

what are you trying to do ? so based on that choose the right place and direction to implement.

[Georg Pauwen]

Hello,

I think you need Lan Base image on the 2960X. Provided you have that, below is a sample configuration. 10.10.10.10 would be the IP address of your monitoring station. The sampler is optional:

hostname 2960X
!
flow record FLOW_1_L2_REC
description L2 Netflow for Trunk Gi0/0
match datalink mac source address input
match ipv4 tos
match ipv4 protocol
!
flow exporter FLOW_1_EXP
description FLOW_1 Exporter
destination 10.10.10.10
source Loopback1
dscp 46
transport udp 5555
!
flow monitor FLOW_1_MON
description FLOW_1 Monitor
exporter FLOW_1_EXP
cache timeout active 15000
cache entries 10000
record FLOW_1_L2_REC
!
sampler FLOW_1_SAM
description FLOW_1 Sampler
mode random 1 out-of 1022
!
interface Loopback1
ip address 1.1.1.1 255.255.255.255
!
interface GigabitEthernet0/0
description Trunk to S2
switchport trunk encapsulation dot1q
switchport mode trunk
ip flow monitor FLOW_1_MON sampler FLOW_1_SAM input
media-type rj45
negotiation auto
!
interface Vlan 1
ip address 10.10.10.1 255.255.255.0