ā08-10-2017 09:45 PM
Hello all,
I am using 2 Cisco Catalyst 2960X as a stacked switch and I am trying to set up Netflow on them with PRTG as network monitor but it seems that I'm stuck somewhere, below are the config I'm using:
flow record toPRTG
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect interface input
!
!
flow record toPRTG1
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
!
!
flow exporter toPRTG
destination 172.18.145.xxx
transport udp 9995
!
!
flow monitor toPRTG
exporter toPRTG
cache timeout active 15000
record toPRTG
!
!
sampler toPRTG
mode random 1 out-of 32!
!
interface GigabitEthernet2/0/10
switchport access vlan xxx
switchport mode access
ip flow monitor toPRTG sampler toPRTG input
spanning-tree portfast
!ip flow-export version 9
ip flow-export destination 172.18.145.xxx 9995
And the settings on PRTG
I can see that the Flow Exporter is sending data, but PRTG does not receive any thing from the UDP port I have configured. There is a firewall between 2 devices but I have allowed the flow to go through it.
LBN-STACK-SW#show flow exporter statistics
Flow Exporter toPRTG:
Packet send statistics (last cleared 2d00h ago):
Successfully sent: 6489 (4907448 bytes)Client send statistics:
Client: Flow Monitor toPRTG
Records added: 195422
- sent: 195422
Bytes added: 3126752
- sent: 3126752
May I know what I might have configured wrong?
Thanks in advance.
ā08-17-2017 07:01 AM
Try adding an Export Source:
ip flow-export source GigabitEthernet0/0 or whatever your source may be back to the PRTG box.
I also have my active flow timeout set to 1 min:
ip flow-cache timeout active 1
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide