NETFLOW in Catalyst 3750 o 3850

[flielguera]

Friends, good morning, I need to configure the NETFLOW in some of my SWITCH Catalyst 3750 and 3850, according to the manual, I must go to the global mode and enter the command "ip flow-export destination xxxx", then in the interface that I want to monitor, I must configure "ip flow egress" or "ip flow ingrees". But the "ip flow XXXXX" command does not exist in the global mode of my SWITCHS. Example: Switch 3750 CC3750_NCB22P_STK202 # config t Enter configuration commands, one per line. End with CNTL / Z. CC3750_NCB22P_STK202 (config) #ip flow? % Unrecognized command CC3750_NCB22P_STK202 (config) # Switch 3850: YN-NW-GB06-170 # config t Enter configuration commands, one per line. End with CNTL / Z. YN-NW-GB06-170 (config) #ip flow                            ^ % Invalid input detected at '^' marker. YN-NW-GB06-170 (config) # IOS version of 3750: Switch Ports Model SW Version SW Image ------ ----- ----- ---------- ---------- * 1 28 WS-C3750G-24TS 12.2 (55) SE11 C3750-IPSERVICESK9-M IOS version of 3850: Switch Ports Model SW Version SW Image Mode ------ ----- ----- ---------- ---------- ----      1 32 WS-C3850-24T 03.06.06E cat3k_caa-universalk9 INSTALL * 2 32 WS-C3850-24T 03.06.06E cat3k_caa-universalk9 INSTALL Please, can you tell me some solution or I am configuring badly. Thank you. Greetings. Fernando

[johnd2310]

Hi,

3750 does not support netflow

3850 supports netflow. You can find the configuration guide for 3850 at the link below:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3e/flexible_netflow/configuration_guide/b_fnf_3e_3850_cg.html

Thanks

John

[Mark Malone]

Just to add heres a working example you can test with as an example

Layer 3 interface
ip flow monitor testflow input
ip flow monitor testflow output


flow record FLOW-RECORD
description record to monitor network traffic
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect routing source as
collect routing destination as
collect routing next-hop address ipv4
collect transport tcp flags
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
!
flow exporter NetQos
description export Netflow traffic to HQ
destination x.x.x.x
source xxxxxxxx
template data timeout 300
option interface-table timeout 1000
option exporter-stats timeout 1000
!
!
flow monitor testflow
description Used for ipv4 traffic analysis (Mapped To FLOW-RECORD)
record FLOW-RECORD
exporter NetQos
statistics packet protocol

[andrew.butterworth]

Actually the Catalyst 3560, 3750, 3560X & 3750X do support NetFlow in the form of performance monitoring.

https://community.cisco.com/t5/other-network-architecture/3750-x-and-performance-monitor/td-p/1909463

https://www.cisco.com/c/en/us/td/docs/ios/media_monitoring/configuration/guide/12_2_58_se/mm_12_2_58_se/mm_pasv_mon.html

I have had this configured on an uplink on a Catalyst 3560G for ages.  Just replaced it for a 3560X and get the same features.  It lacks any IPv6 support though.