cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1871
Views
0
Helpful
0
Replies

Multiple ip flow monitor entries on 1 interface

luke.brooker1
Level 1
Level 1

Hi,

I have configured Netflow on our Cisco devices and this has been working for some time;

 

flow record <Flow_Record_Name>
match datalink vlan input
---SNIP---
collect timestamp sys-uptime last

flow exporter <Flow_Export_Name>
destination <<IP_Address>>
source LoopbackX
transport udp ##
template data timeout 30
option interface-table

 

flow monitor <Flow_Monitor_Name>
record <Flow_Record_Name>
exporter <Flow_Export_Name>
cache timeout active 60

 

I have a need to export flow to a 2nd NMS tool. I believe that i can create a 2nd flow exporter, with the 2nd NMS tool export IP address, and the add that 2nd exporter record to the existing flow monitor. However, this will export all interface flow records  (100's of interfaces) that are configured with the existing flow monitor to my 2nd NMS tool, and this will blow up licensing on that NMS tool (as soon as flow records come in, it consumes licenses per interface that it see's flow for).

 

I can cater for maybe 10 interfaces in total given the current licensing on the 2nd NMS tool. My solution is to create a 2nd exporter and a 2nd flow monitor, and have 2x flow monitors on 'important' interfaces that i'm happy to consume licenses for on my 2nd NMS tool. Are there any caveats or anything i need to know regarding having multiple flow monitors on a single interface (CPU / memory etc?).

 

Would be configured on SVI interfaces.

 

cisco WS-C6506-E   (VSS pair)

VS-SUP2T-10G

DFC4 line cards 

s2t54-adventerprisek9-mz.SPA.150-1.SY4

 

Thanks for any thoughts or advice !

 

0 Replies 0