cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2831
Views
0
Helpful
10
Replies

Netflow and cisco switch

sanjar200994
Level 1
Level 1

Hi everyone, I have a question. Is it possible to monitoring traffic of cisco switch with netflow. Now I can monitoring routers but it doesn't w

10 Replies 10

sanjar200994
Level 1
Level 1

But it doesn't work with switch 

But it doesn't work with switch 

what does not work ? you need to provide some evidence what you have tried ?

Also provide information below :

1. switch model

2. IOS running

3. what License

4. what config you applied ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

sidshas03
Spotlight
Spotlight
! Enable NetFlow globally
ip flow-export version 9
ip flow-export destination <collector IP address> <collector port>

! Monitor traffic on an interface
interface GigabitEthernet1/0/1
 ip flow ingress
 ip flow egress

Once you have enabled NetFlow on the switch and configured it to export NetFlow records to a collector, you can use a NetFlow analysis tool, such as PRTG, SolarWinds, or Scrutinizer, to view and analyze the NetFlow data.

I hope this helps! Let me know if you have any other questions.

I tried config like you. And I tried to use Netflow analyzer and prtg. With router it works without problem but doesn't work with switch 

Joseph W. Doherty
Hall of Fame
Hall of Fame

Depends on switch's capabilities and possibly IOS version, feature set, licensing.

I have catalyst 3750, now can't remember iOS version. But sure that it latest version for this switch 

What 3750 variant?  I recall (???) the 3750 and 3750G didn't support Netflow, the 3750E supported Netflow, with an optional module, which only applied to the ports on the module, and I don't recall the situation for the 3750-X.

Correction (?), it looks like it was the 3750-X that accepted a Netflow module, the C3KX-SM-10G.

Yes I checked, I have 3750x and I try to read traffic 1/0/1. But how I understood I can read traffic just if I have 10g module?

I believe that's correct, but it's not just any 10g module, it must be one particular module.