cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2470
Views
0
Helpful
1
Replies

netflow on c4351 ios-xe isr

mialbert
Level 1
Level 1

I have netflow configured on a c4351 ios-xe isr on isr4300-universalk9.03.13.02.S.154-3.S2-ext.SPA.bin ios.  I am noticing that it is not sending out netflow v5 packets, across an ipsec tunnel, to it's collector.  It's configuration is below.  Previously the below worked fine on a 2900 series isr when output-features command was added.  It appears that output-features is added with ios-xe by default.  It is still not working however.  Is there something else to add with ios-xe?

 

flow record RECORD-1
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 collect interface output
 collect counter bytes
 collect counter packets

flow exporter EXPORT-1
 destination <<destination address through vpn tunnel>>
 source GigabitEthernet0/0/1
 transport udp 2055
 export-protocol netflow-v5

 
flow monitor MONITOR-1
 exporter EXPORT-1
 record RECORD-1 
 
on all interfaces
  ip flow monitor MONITOR-1 input
  ip flow monitor MONITOR-1 output 

 

 

1 Reply 1

gaskincharles
Level 1
Level 1

I'm having just about the same problem, except I am not going over an IPSEC tunnel to send the data. The Netflow analyzer is on the same LAN as the router.