Suppose scenario like this
Does this configuration capture internal traffic ? Suppose there is communication between access switches on vlan 10.
Configuration on the core
!
flow record NetFlow-to-Orion
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes long
collect counter packets long
!
!
flow exporter NetFlow-to-Orion
destination 10.32.xx.xx
source Vlan99
transport udp 2055
!
!
flow monitor NetFlow-to-Orion
exporter NetFlow-to-Orion
cache timeout active 60
record NetFlow-to-Orion
!
vlan configuration 10,20
ip flow monitor NetFlow-to-Orion input
