ā12-23-2015 04:49 PM - edited ā03-05-2019 03:00 AM
Hi All,
After implementing a FlexVPN, i have an issue with Netflow.
All my ISR G2 routers are sending flows from not only configured interface, but also all DVTI as shown on attached photo.
Is there a way to stop routers sending netflow from DVTI ?
Thanks in advance
ā12-23-2015 05:22 PM
Can you supply a config snippit show of the VTI interface?
ā12-23-2015 06:06 PM
Here is the VTI template:
interface Virtual-Template1 type tunnel
description FlexMesh Template
ip unnumbered Loopback0
ip mtu 1400
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
tunnel protection ipsec profile default
end
!
flow export is only configured on Lan interface as following:
interface GigabitEthernet0/0.1
description Data Network
encapsulation dot1Q 1 native
ip address xxxx
ip nbar protocol-discovery
ip flow monitor predefined-ipv4 input
ip flow monitor predefined-ipv4 output
ip pim sparse-mode
end
!
ā12-23-2015 06:22 PM
Smells like a software bug to me. I'd try testing a new IOS version if it is an issue.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide