Netflow intra-VLAN

[Christian Jorge]

Good night

Customer has a 6509 switch in VSS-mode configured with may interface VLANs. No routed physical interfaces, only switched ones.

The idea is to enable netflow into this switch to collect data regarding flows and sendo to a netfow analyzer (Orion). I can't see no problem to perform this in layer-3 interfaces (interfaces VLAN).

But I could not find anything regarding collect data flows between hosts in the same VLAN. For example, in VLAN 600 we have a SAP Application and we want to collect data regarding flows to SAP DB in the same VLAN.

Is there any way to perform this or unfortunatelly only in interface VLAN, collecting flows to other VLANs?

[glen.grant]

Try here and see if that helps, 

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080721701.shtml#switched

[Christian Jorge]

Interesting article

Need to read further, I'm not familiarized with netflow commands, but it seems a possibility to perfom intra VLAN flow analysis.

Another quastion is regarding de CPU use. I'm afraid to impact the switch.

Now the characteristics of the switch is:

chassis: WS-C6509-E

modules:

Supervisor Engine 720 10GE

CEF720 48 port 10/100/1000mb Ethernet

CEF720 16 port 10GE 

submodules:

Distributed Forwarding Card

Centralized Forwarding Card

Policy Feature Card 3 

MSFC3 Daughterboard

CPU now: average: 20%, peak: 60%