SDWAN DIA and Netflow Data Policy

[cloudlogics]

Does anyone have any idea how to configure multiple sub-data policies in a data policy?

I have 15 sites and 3 VPNs/VRFs. I have created a single site list with all 15 sites in it and then created a Cflow policy "Traffic Data" policy to enable Cflow (also defined localized data policy and Cflowd policy). I have added the Cflowd "Traffic Data" policy to the centralized data policy and applied it to all sites, and all VPNs. This works fine.

Now I need to create a DIA policy for one site and one VPN. How can I add this to the existing sub-data Policy as only one Data policy is permitted? If I add it to the existing data policy, it will be applied to all sites and all VPNs, which is not desired. I also need to have Cflow policy working for all VPNs at this site.     

Question is how do I add DIA policy? as one site can have only one policy in any one direction

viptela-policy:policy
cflowd-template NETFLOW_COLLECTOR
protocol ipv4
customized-ipv4-record-fields
no collect-tos
no collect-dscp-output
collector vpn 1 address 2.2.2.2 port 9999 transport transport_udp source-interface GigabitEthernet1.11
!
data-policy _NETFLOW_POL
vpn-list VPN1
sequence 1
match
source-ip 0.0.0.0/0
!
action accept
cflowd
!
!
default-action accept
!
vpn-list VPN2
sequence 1
match
source-ip 0.0.0.0/0
!
action accept
cflowd
!
!
default-action accept
!
lists
!
site-list SITES
site-id 100-115
!
vpn-list VPN1
vpn 1
!
vpn-list VPN2
vpn 2
!
vpn-list VPN3
vpn 3
!
prefix-list _AnyIpv4PrefixList
ip-prefix 0.0.0.0/0 le 32
!
apply-policy
site-list SITES
data-policy _NETFLOW_POL from-service
cflowd-template NETFLOW_COLLECTOR
!
! 

[Kanan Huseynli]

Hi,

that's is the reason why you should normally have different Data Policy for each site or the same purpose site.

If you add any policy now, it will work in any attached policy.

Create new data policy (you can do copy from existing one), give site specific name for easy reference, add new DIA policy (be careful with overlaps, policy is evaluated like access-list from top to down). And change data policy for that specific site.