cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
1139
Views
0
Helpful
1
Replies

csr1000v netflow source IP

jimwarman
Level 1
Level 1

I have 3 CSR's setup and working.  Trying to get netflow to work.  One works just fine but the other two aren't.  Same configuration across the board, destination IP, source interface etc.  The two that don't work look like they are pulling a source IP address off an interface that isn't the specified one:

Flow Exporter nflow:

  Description:              User defined

  Export protocol:          NetFlow Version 9

  Transport Configuration:

    Destination IP address: 172.17.195.95

    Source IP address:      Public IP on Gig 3

    Source Interface:       GigabitEthernet1

    Transport Protocol:     UDP

    Destination Port:       2055

    Source Port:            52340

    DSCP:                   0x0

    TTL:                    255

    Output Features:        Used

interface GigabitEthernet1

 description management

 vrf forwarding MGMT

 ip address 172.17.195.199 255.255.255.0

 negotiation auto

I have removed and reconfigured it numerous times but it will not stop grabbing the public ip assigned to a totally different interface.  You can't specify anything but the source interface in the exporter config:

flow exporter nflow

 destination 172.17.195.95

 source GigabitEthernet1

 transport udp 2055

 template data timeout 60

1 Reply 1

Alex Pfeil
Level 7
Level 7

Please try the flexible netflow configuration.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html

 

The new command is ip flow monitor "your monitor here" input

ip flow monitor "your monitor here" output

 

you have to configure record, monitor, and exporter.

 

 

Please rate helpful posts.

Review Cisco Networking for a $25 gift card