- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 01:31 AM
Hi,
I am trying to send netflow data to collector server through ASR1006 Gig0 interface.
Gig0 is in vrf Mgmt-intf
Unable to see data in collector server
Below is configuration :
flow record Record_NFA
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match application name
collect interface output
collect transport tcp flags
collect counter bytes long
collect counter packets long
collect ipv4 source mask
collect ipv4 destination mask
collect ipv4 source prefix
collect ipv4 destination prefix
collect timestamp sys-uptime first
collect timestamp sys-uptime last
flow exporter Exporter_NFA
destination x.x.x.x vrf Mgmt-intf
source GigabitEthernet0
transport udp 9996
template data timeout 60
option interface-table timeout 60
option application-table timeout 60
flow monitor Monitor_NFA
exporter Exporter_NFA
record Record_NFA
cache timeout active 60
interface GigabitEthernet0/0/5
ip flow monitor Monitor_NFA input
ip flow monitor Monitor_NFA output
Kindly suggest.
Solved! Go to Solution.
- Labels:
-
Network Management
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 03:59 AM
i have ASRs , we had the same issue , change the interface to a proper data port , the MGMT port is a stripped down version does not contain the full features , you cant send netflow traffic through the MGMT VRF its not supported thats why your not seeing flows
example changed from g0 to 0/0/5 on the ASR
interface GigabitEthernet0/0/5
description *****OOBM MGMT INT*****
ip vrf forwarding Mgmt-vrf
ip address x.x.x.x 255.255.254.0
negotiation auto
cdp enable
flow exporter LIVEACTION-FLOWEXPORTER-IPFIX
description DO NOT MODIFY. USED BY LIVEACTION.
destination x.x.x.x vrf Mgmt-vrf
source GigabitEthernet0/0/5
transport udp 2055
export-protocol ipfix
option interface-table
option vrf-table
option sampler-table
option application-table
option c3pl-class-table
option c3pl-policy-table
option application-attributes
!
!
flow exporter NETQOS-FLOWEXPORTER-IPFIX2
destination x.x.x.x vrf Mgmt-vrf
source GigabitEthernet0/0/5
transport udp 9995
export-protocol ipfix
option interface-table
option vrf-table
option sampler-table
option application-table
option c3pl-class-table
option c3pl-policy-table
option application-attributes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 01:45 AM
description *** Management Interface ***
vrf forwarding Mgmt-intf
ip address x.x.x.x 255.255.252.0
negotiation auto
end
Flow Exporter Exporter_NFA:
Packet send statistics (last cleared 00:28:03 ago):
Successfully sent: 36906 (50098440 bytes)
Client send statistics:
Client: Flow Monitor Monitor_NFA
Records added: 832468
- sent: 832468
Bytes added: 49948080
- sent: 49948080
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 02:25 AM
You cant send netflow through MGMT interface , select another interface and put the interface under the MGMT vrf , that will work
from the docs
Flexible NetFlow export is not supported on the Ethernet management port, Gi0/0.
interface GigabitEthernet0/5
description *** Management Interface ***
vrf forwarding Mgmt-intf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 03:28 AM
Hi Mark,
Thank you for your reply.
My export destination is in Mgmt-intf vrf same as source gig0 interface.
flow exporter Exporter_NFA
destination X.X.X.X vrf Mgmt-intf
source GigabitEthernet0
transport udp 9996
template data timeout 60
option interface-table timeout 60
option application-table timeout 60
I am running one more flow exporter destination but same is not in Mgmt-intf vrf.
flow exporter FlowExporter1
destination Y.Y.Y.Y
source GigabitEthernet0
transport udp 9996
I am using same source interface for both the exporter.
source interfaceconfiguration :
interface GigabitEthernet0
description *** Management Interface ***
vrf forwarding Mgmt-intf
ip address x.x.x.x 255.255.252.0
negotiation auto
end
FlowExporter1 is working correctly. Exporter_NFA is not working.
Kindly suggest.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 03:59 AM
i have ASRs , we had the same issue , change the interface to a proper data port , the MGMT port is a stripped down version does not contain the full features , you cant send netflow traffic through the MGMT VRF its not supported thats why your not seeing flows
example changed from g0 to 0/0/5 on the ASR
interface GigabitEthernet0/0/5
description *****OOBM MGMT INT*****
ip vrf forwarding Mgmt-vrf
ip address x.x.x.x 255.255.254.0
negotiation auto
cdp enable
flow exporter LIVEACTION-FLOWEXPORTER-IPFIX
description DO NOT MODIFY. USED BY LIVEACTION.
destination x.x.x.x vrf Mgmt-vrf
source GigabitEthernet0/0/5
transport udp 2055
export-protocol ipfix
option interface-table
option vrf-table
option sampler-table
option application-table
option c3pl-class-table
option c3pl-policy-table
option application-attributes
!
!
flow exporter NETQOS-FLOWEXPORTER-IPFIX2
destination x.x.x.x vrf Mgmt-vrf
source GigabitEthernet0/0/5
transport udp 9995
export-protocol ipfix
option interface-table
option vrf-table
option sampler-table
option application-table
option c3pl-class-table
option c3pl-policy-table
option application-attributes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2019 04:09 AM
Thanks. This worked.
