Flexible Netflow 3750

Rawa Salah · ‎09-30-2013

Dears

please i have this cisco switch

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ----------

* 1 30 WS-C3750X-24 12.2(55)SE5 C3750E-UNIVERSALK9-M

i want to configure Flexible Netflow on this switch ,

guide me what is the configuration need to run flexible Netflow ?

realy i dont have information about Flexible Netflow ............ please help me

Lei Tian · ‎10-01-2013

Hi,

First you need to make sure you have the 10G service module, which is required for netflow on 3750X. You can follow the following order to configure fleible netflow:

1, configure flow record (define your flow)

2, configure exporter (where to send the flow data)

3, combine flow record and exporter to a monitor

4, apply monitor to interface.

Also notes, for 3750X, the netflow can only be configured on service module port.

HTH,

Lei Tian

Rawa Salah · ‎10-01-2013

Dear Mr . Lei

Appreciated Your Answer,.......

please could you guide me for configuration of that steps ? really i dont have experience on Flexible Netflow....

Yas i have this 10G Module card , and this is my IOS emage

please is this IOS image

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ----------

* 1 30 WS-C3750X-24 12.2(55)SE5 C3750E-UNIVERSALK9-M

c3750e-universalk9-mz.122-55.SE5.bin

is it need to upgrade ?

please help and Appreciated .........

Lei Tian · ‎10-01-2013

Hi,

Yes, you need 15.0(1)SE code to run netflow. So, upgrade is needed. See the following confogiration gudie

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/configuration/guide/swmnetflow.html

step1

flow record NETFLOW

match ipv4 source address

match ipv4 destination address

collect counter bytes

collect counter packets

step 2

flow monitor NETFLOW

destination 1.1.1.1

source loopback 0

step 3

flow monitor NETFLOW

record NETFLOW

exporter NETFLOW

step 4

interface G1/1/2

ip flow monitor NETFLOW input

HTH,

Lei Tian

Rawa Salah · ‎10-01-2013

Really you Are so helpfull ,

Thank you SO SO much

just telme more about ,all ( flow record , flowmonitor , record, exporter , ) must be the same name ( NETFLOW ) right ?

also why need loopback 0 ???? the destination (1.1.1.1) is Packet Analyzer user , right ????

can i set this netflow on LACP ports (2 port) ? i mean instead of ( interface gig 1/1/2 ) ?

APPRECIATED MR LEI

Lei Tian · ‎10-01-2013

Hi Rawa,

You welcome! You dont have to use same name. I used same name in the example, but you can use different name, for example, test_record, test_monitor, test_exporter..

You dont have to use loopback0, but is recommended to source netflow from loopback interface.

Unfortunately, netflow is not supported on port-channel. The limitation is documented in the configuration guide.

HTH,

Lei Tian

Rawa Salah · ‎10-01-2013

Dear Lei

please this is Memory capacity of my switch

cisco WS-C3750X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory.

you prefer to upgrade which ios image ? i mean c3750x universalk9 15 SE or c3750x ipservicesk9 15 SE ???

Lei Tian · ‎10-02-2013

Hi Rawa,

It should be fine with either one. If you have smartnet contract, the proper way is to download universal image with ipservices license. Please refer the following license document for detail

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps6406/white_paper_c11-579326_ps10745_Products_White_Paper.html

HTH,

Lei Tian

Rawa Salah · ‎10-02-2013

DEAR

PLEASE HELP ME AS SOON AS POSSIBLE

i upgraded the Switch , during botting i faced it and dont be complete

Switch uptime is 8 minutes, 15 seconds

cisco WS-C3750X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory.

Processor board ID FDO1701W1GR

01:35:45 UTC Wed Mar 30 2011: Unexpected exception to CPUvector 700, PC = FFFFFF2C

-Traceback= 0xFFFFFF2Cz

Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.2(1)E, RELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Compiled Tue 27-Aug-13 11:06 by prod_rel_team

Program Exception (0x0700)!

SRR0 = 0x04002F60 SRR1 = 0x00029230 SRR2 = 0x02898534 SRR3 = 0x00029230

ESR = 0x08000000 DEAR = 0x00000000 TSR = 0x84000000 DBSR = 0x00000000

CPU Register Context:

Vector = 0x00000700 PC = 0x04002F60 MSR = 0x00029230 CR = 0x35000053

LR = 0x02005414 CTR = 0x00000000 XER = 0xE0000010

R0 = 0x00000000 R1 = 0x055D6E80 R2 = 0x00000000 R3 = 0x055D6EA0

R4 = 0x00000031 R5 = 0x055D6F54 R6 = 0x00000018 R7 = 0x0534A693

R8 = 0x0000001D R9 = 0x0534A690 R10 = 0x00000017 R11 = 0x00000050

R12 = 0x00000000 R13 = 0x0B98279C R14 = 0x00688E58 R15 = 0x00000002

R16 = 0x00000000 R17 = 0x0534A690 R18 = 0x00000001 R19 = 0x00000099

R20 = 0x04E2CDCD R21 = 0x051D0000 R22 = 0x00000000 R23 = 0x00000002

R24 = 0x00000001 R25 = 0x055D6ED4 R26 = 0x04E2C9F8 R27 = 0x00000036

R28 = 0x00000004 R29 = 0x04E2C9D8 R30 = 0x05FEE5D8 R31 = 0x0000003A

Stack trace:

PC = 0x04002F60, SP = 0x055D6E80

Frame 00: SP = 0x055D6F98 PC = 0x020052CC

Frame 01: SP = 0x055D70C8 PC = 0x02006668

Frame 02: SP = 0x055D70E8 PC = 0x02006CCC

Frame 03: SP = 0x055D7198 PC = 0x02006FB4

Frame 04: SP = 0x055D71B8 PC = 0x028D881C

Frame 05: SP = 0x055D71F8 PC = 0x026BC780

Frame 06: SP = 0x055D7208 PC = 0x022AA47C

Frame 07: SP = 0x055D7228 PC = 0x022AA648

Frame 08: SP = 0x055D7240 PC = 0x022AA798

Frame 09: SP = 0x055D7270 PC = 0x00688C68

Frame 10: SP = 0x055D7378 PC = 0x00688EA0

Frame 11: SP = 0x055D7380 PC = 0x02D5771C

Frame 12: SP = 0x00000000 PC = 0x02D51C54

Switch uptime is 8 minutes, 18 seconds

cisco WS-C3750X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory.

Processor board ID FDO1701W1GR

01:35:48 UTC Wed Mar 30 2011: Unexpected exception to CPUvector 700, PC = FFFFFF2C