[netflow support?]3560X-24T-S <-- which module would I choose?

[Soon Kwan Kwon]

 Hello all,

I have to configure "netflow" function on the switch.

So, searching on the internet, I figured out that C3850-24T-L, C3750X, 3560X are supporting netflow.

The thing that I found was below

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-0_1_se/configuration/guide/3750xcg/swmnetflow.html

The red line that I indicated was that I want to know more.

[First red line]

I plan to buy 3560-24T-S. <-- Is it IP base, isn't it?

[Second red line]

"Although other modules that can be installed in the ~", 

I don't know "can be installed".. <-- Is it saying by default??

If so, which module should I take? 

for example, C3KX-SM-10G

Best regards,

SK

[InayathUlla Sharieff]

Sk,

you are absolutely right. If you wanna use the Netflo wthen you need one of the 10GE Service module.

product IDs that can be used for ordering the 10GE service module for Cisco Catalyst 3560-X and 3750-X Series Switches.

Table 1.       Product IDs and Descriptions

Product ID	Description
C3KX-SM-10G	Two 10GbE SFP+ ports service module for Cisco Catalyst 3560-X and 3750-X
C3KX-SM-10G=	Two 10GbE SFP+ ports service module for Cisco Catalyst 3560-X and 3750-X (spare)

Ref:

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-x-series-switches/white_paper_c11-691508.html

Question:-

Flexible NetFlow is supported only on the Catalyst 3750-X and 3560-X switch running the IP base or IP services feature set and equipped with the network services module. It is not supported on switches running the NPE or the LAN base image.

Answer:- 

Q.    I have a Cisco Catalyst 3750X/3560X switch with LAN Base license on it. Can I use the Service Module to configure MACSec and Netflow?

A.     No. In order to use the Netflow and MACSec features, the switch must be running IP Base or IP Services license levels.

so you need to order the IP Base license if you want to use this particular feature.

HTH

Regards

Inayath

[Soon Kwan Kwon]

Thank you InayathUlla, 

It was really helpful for me.

Can I ask you one question?

1. Just 10G supports netflow?, 

1G does not support netflow??

Regards,

SK

[Giuseppe Larosa]

Hello SK,

you can use a 3560-24TS with IPbase but you need the appropriate uplink module installed in the switch.

The correct  module should be:

cfg:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-0_2_se/configuration/guide/3750x_cg/swmnetflow.html

datasheet:

C3KX-SM-10G

Service Module with two 10GbE SFP+ ports network module for Netflow and MACsec encryption

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-x-series-switches/data_sheet_c78-584733.html?cachemode=refresh

So your understanding is correct

Hope to help

Giuseppe

[Soon Kwan Kwon]

Thank you sir,.

Like you said, I understand that I can buy network module.

But my boss just told me that we must buy "3650-24TS-S".

I'd like to ask you just 1 question.

1. If I buy 3650-24TS-S, should I buy network module like 3560X?

(I assume that 3650 does not support module..)

Regards,

SK

[Giuseppe Larosa · Accepted solution]

Hello SK,

if you buy the mode modern 3650-24TS-S you don't need the separated uplink module to support flexible netflow, the feature is built in the device.

>> Enhanced security with support for Flexible NetFlow, Cisco TrustSec, and MACsec encryption

see

http://www.cisco.com/c/en/us/products/switches/catalyst-3650-series-switches/index.html

Hope to help

Giuseppe

[Soon Kwan Kwon]

Thank you so much^^ sir