Hi following the order of operation in IOS,
as you can see Netflow ingress is taken before Decryption
and Netflow egress is taken after Encryption.
So we have the problem that Netflow-records which are exported (created on ingress or egress netflow on a encrypted link) we only get the information about the IP-addresses (because GET-VPN preserves the IP-header) but not about the L4-Protocols. Every traffic is shown a ESP, which is clear if we have a look onto the order of IOS operations.
Is there any (hidden) way to influence these oder of operations, se we would be able to get netflow-records with the correct L4-Ports ?
Thx
Hubert
