cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3431
Views
0
Helpful
1
Replies

Netflow on IOS XE - 4321 Router

ALIAOF_
Level 6
Level 6

Running the following on 4321

Cisco IOS XE Software, Version 03.13.04.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S4, RELEASE SOFTWARE (fc3)

Working on configuring netflow well flexible netflow on this router.  Here is my config that I was wondering if I can get reviewed.

Now unlike on the older routers I was not able to specify the following

flow timeout active 1
flow timeout inactive 15
flow timeout fast 64 threshold 30

Also I was reading the configuration guide of 4321 and it mentioned configuring Aggregation Cache however those commands are not available on 4321 so I am a bit confused there.

See my config below.  Thank you

### FLOW EXPORTERS ###
flow exporter SOLARWINDS-1
  destination 10.202.110.73
  transport udp 2055
  source loopback0
  export-protocol netflow-v9
  template data timeout 30
flow exporter SOLARWINDS-2
  destination 10.202.110.186
  source loopback0
  export-protocol netflow-v9
  template data timeout 30
!
### FLOW RECORD ###
flow record SOLARWINDS
  match ipv4 source address
  match ipv4 destination address
  match ipv4 protocol
  match ipv4 tos
  match transport source-port
  match transport destination-port
  collect routing next-hop address ipv4
  collect transport tcp flags
  collect counter bytes
  collect counter packets
  collect timestamp sys-uptime first
  collect timestamp sys-uptime last
### FLOW MONITOR ###
flow monitor SOLARWINDS
  record SOLARWINDS
  exporter SOLARWINDS-1
  exporter SOLARWINDS-2

1 Reply 1

Hello.

FNF is slightly different from legacy netflow and for IOS XE you should use FNF CLI.

Cahce timeouts goes to flow objects (like monitor).

Link -Flexible NetFlow Configuration Guide

Review Cisco Networking for a $25 gift card