cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
14513
Views
0
Helpful
4
Replies

Flexible NetFlow Configuration

zekebashi
Level 4
Level 4

Hello,

 

I was trying to configure Flexible Netflow on C9500 running Fuji 16.09.04 and ran into an issue. When I try to assign an ip flow monitor to an SVI, the command is rejected. Here's the output from the cli "SW-A(config-if)#ip flow monitor standardMonitor input % Flow Monitor: Failed to add monitor to interface: flexible netflow not supported on vlan interfaces.

Here's the Flexible Netflow configured:

 


flow record "standardRecord"
match ipv4 source address
match ipv4 destination address
match ipv4 protocol
match transport source-port
match transport destination-port
match ipv4 tos
match interface input
match interface output
collect counter bytes long
collect counter packets long
!

flow exporter "standardExporter_UDP_9995"
destination 10.1.10.40
source Loopback100
transport udp 9995
export-protocol netflow-v9
!
!
flow exporter "standardExporter_UDP_2055"
destination 10.1.10.176
source Loopback100
transport udp 2055
export-protocol netflow-v9

!
!
flow monitor standardMonitor
exporter "standardExporter_UDP_2055"
exporter "standardExporter_UDP_9995"
cache timeout active 60
record "standardRecord"

!

!

interface Vlan110
ip flow monitor standardMonitor input

!!!!!!!!! Error produced!!!!!

SW-A(config-if)#ip flow monitor standardMonitor input % Flow Monitor: Failed to add monitor to interface: flexible netflow not supported on vlan interfaces.

 

 

Any ideas?

 

Thanks in advance,

~zK

 

 

1 Accepted Solution

Accepted Solutions

Yes, you can do it to different monitos and/or vlans. Use the same syntax.

Mark as solved and helpful it, it will help other users

Regards,
Jaderson Pessoa
*** Rate All Helpful Responses ***

View solution in original post

4 Replies 4

Jaderson Pessoa
VIP Alumni
VIP Alumni

try it:

vlan configuration   1,2,3-5  ( choice your vlans )
ip flow monitor standardMonitor input

Jaderson Pessoa
*** Rate All Helpful Responses ***

Thanks for your response. That didn't work! Here's the output produced after applying your suggested configs:

 

 

 

SW-A(config-vlan-config)#ip flow monitor standardMonitor input
% Flow Monitor: Flow Monitor 'standardMonitor' Unsupported key field "interface output" for ip traffic in Input direction

 

DMZSW-A(config-vlan-config)#ip flow monitor standardMonitor out
% Flow Monitor: Flow Monitor 'standardMonitor' Unsupported key field "interface input" for ip traffic in Output direction

 

Any other ideas?

 

Best, ~zK

OK, so I had to create a user-defied records and use the command you suggested and that worked. However, the use of that command seem to have created a new command/syntax in the running configuration file which I have never seen before nor do I understand what it does. Is this command linked to the L3 VLAN 110 or L2 VLAN 110?

 


vlan configuration 110
ip flow monitor MONITOR_IN input
ip flow monitor MONITOR_OUT output

!

!

||||||||||||  Flexible Netflow Commands used |||||||||||||

 

flow record RECORD-IN
match flow direction
match interface input
match ipv4 destination address
match ipv4 protocol
match ipv4 source address
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface output
collect transport tcp flags

flow record RECORD_OUT
match flow direction
match interface output
match ipv4 destination address
match ipv4 protocol
match ipv4 source address
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface input
collect transport tcp flags
!
!

flow exporter Exporter_UDP_9995
 destination 10.1.6.40
 source Loopback100
 transport udp 9995

flow exporter Exporter_UDP_2055
 destination 10.1.6.176
 source Loopback100
 transport udp 2055
!
!
flow monitor MONITOR_IN
 exporter Exporter_UDP_2055
 exporter Exporter_UDP_9995
cache timeout inactive 10
cache timeout active 60
record RECORD_IN
!
flow monitor MONITOR_OUT
 exporter Exporter_UDP_2055
 exporter Exporter_UDP_9995
cache timeout inactive 10
cache timeout active 60
record RECORD_OUT
!
SW-A#config t
SW-A(config-vlan-config)#vlan configuration 110 
SW-A(config-vlan-config)#ip flow monitor MONITOR_IN input
SW-A(config-vlan-config)#ip flow monitor MONITOR_OUT output


 

 

Thanks in advance, ~zK

Yes, you can do it to different monitos and/or vlans. Use the same syntax.

Mark as solved and helpful it, it will help other users

Regards,
Jaderson Pessoa
*** Rate All Helpful Responses ***

Review Cisco Networking for a $25 gift card