11-14-2024 11:39 AM
hello everyone. hope you are doing well. i have a question regarding netflow not working on a 9500 catalyst connected to another 9500 via stackwise virtual and for some reason, it's sending 0's when capturing data on wireshark. any help on this matter will be appreciate. here is a screenshot from the event
11-14-2024 11:46 AM
what version code running, how is your configuration look like ?
I have tested several SVL and works as expected
11-14-2024 12:22 PM
11-14-2024 10:33 PM
Not i have tried the loopback does the traffic transit via loopback ? try change this to Data interface like SVI or Ethernet interface and check.
source $LOOPBACK_IFNAME
Also can you post the config of -
show run Int TenGigabitEthernet1/1/0/18
11-15-2024 04:36 AM - edited 11-15-2024 04:42 AM
Yeah. It works with the loopback with no issues. Remember, the loopback interface never goes down so, thats why is used as a source even for management purposes as well. if the VLAN goes down, it would not send information to the netflow server. here is the configuration on that interface
interface TenGigabitEthernet1/1/0/18
switchport trunk native vlan 42
switchport trunk allowed vlan 42,2242
switchport mode trunk
ip flow monitor NFAMonitorinput input
ip flow monitor NFAMonitoroutput output
also, tried using the VLAN as a source but no luck. it keeps sending 0's.
now, the interesting thing about this is that when i configured the virtual stackwise, it added another digit i should say to the interface. i dont know if thats the reason its not sending the information back to the netflow server. i have a 9500 which is running normal stack with the stack cables and i dont have any issues with that one.
before
interface TenGigabitEthernet1/0/18
after
interface TenGigabitEthernet1/1/0/18
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide