cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7782
Views
5
Helpful
1
Replies

How to configure IP flow top talkers with flexible netflow on Cisco C1111

charterhouse
Level 1
Level 1

Hi All,

 

I'm wanting to configure IP flow-top-talkers on a Cisco C1111 router. The C1111 uses Flexible Netflow.

 

Does anyone know the configuration or if this is possible?

 

 

1 Reply 1

Ben Walters
Level 3
Level 3

You should be able to configure flexible netflow on the device.

 

There are 3 elements to configuring flexible netflow, the flow record, flow monitor and if you want to use the data with an external program/server/etc the flow exporter.

 

Here is what we typically use for our basic netflow configuration:

 

flow record FLOW-RECORD
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 collect counter bytes long
 collect counter packets long
!

flow exporter FLOW-EXPORT
 destination <IP Address>
 source <VLAN #>
 transport udp <port #>

!
flow monitor FLOW-MON
 cache timeout inactive 300
 record FLOW-RECORD
 exporter FLOW-EXPORT
!
sampler SAMPLER
mode random 1 out-of 32
!
!
interface GigabitEthernet1/0/1
 ip flow monitor FLOW-MON sampler SAMPLER input

On a router ip flow monitor FLOW-MON input & ip flow monitor FLOW-MON output might work instead.

!

 

This should give you a basic working netflow configuration and to view the data use the following show commands:

 

sho flow monitor FLOW-MON cache sort highest counter bytes long top 10
sho flow monitor FLOW-MON cache aggregate ipv4 source address sort highest counter bytes long top 10
sho flow monitor FLOW-MON cache aggregate ipv4 destination address sort highest counter bytes long top 10

 

Hopefully this gets you started with flexible netflow but if you need more in depth information on it check out this document:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/flexible_netflow/configuration_guide/b_fnf_3se_3850_cg/b_fnf_3se_3850_cg_chapter_010.html#concept_A4AB227AC35840A1ACE51453EDBACD3E