cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1798
Views
0
Helpful
1
Replies

Configuring Netflow-Lite on 2960-X

brivington
Level 1
Level 1

I have a 2960-X switch that I want to configure Netflow Lite on, to send Netflow data to my Prime Infrastructure 2.1 appliance. I need some configuration examples for the flow record regarding the source and destination IP addresses? If I want netflow data on all traffic, what should those values be?

Thanks.

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

There is a nice demo script that was developed to show the use case for LiveAction (made by ActionPacked - a Cisco partner) specifically using the 2960-X. If can be downloaded from this link.

In case that doesn't work, here are the relevant bits of their switch configuration. (The addresses and source interface would change based on your setup and PI listens for Netflow on udp/9991 vs. udp/2055.)

flow record LIVEACTION-RECORD
 description DO NOT MODIFY. USED BY LIVEACTION.
 match datalink ethertype
 match datalink mac source address input
 match datalink mac destination address input
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 collect transport tcp flags
 collect interface input
 collect counter bytes long
 collect counter packets long
 collect counter bytes permanent
 collect counter packets permanent
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last
!
!
flow exporter LIVEACTION-EXPORTER
 description DO NOT MODIFY. USED BY LIVEACTION.
 destination 10.10.18.111
 source FastEthernet0
 transport udp 2055
!
!
flow monitor LIVEACTION-MONITOR
 description DO NOT MODIFY. USED BY LIVEACTION
 record LIVEACTION-RECORD
 exporter LIVEACTION-EXPORTER
 cache timeout active 60
!
!
sampler LIVEACTION-FLOWSAMPLER
 description DO NOT MODIFY. USED BY LIVEACTION.
 mode random 1 out-of 500