cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
156
Views
0
Helpful
3
Replies

NetFlow with VRF c9500 switch

Ramprasad2
Level 1
Level 1

Dear Team,

 

I have Cisco C9500 switch.and i have configured VRF in the switch and netlfow and syslog server.

 

but server and syslog server side not received any logs and flow. but i am able to ping syslog and sever ip.

i configured below but not getting any logs. and my inffra use udp port is 9995 


!
vrf definition CORP
rd 100:2
!
address-family ipv4
exit-address-family
!

flow record NFARecordinput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface input
match ipv4 tos
match flow direction
collect interface output
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last
!
!
flow record NFARecordoutput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface output
match ipv4 tos
match flow direction
collect interface input
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last
!

!
flow exporter NFAExporter
destination 172.16.100.48 vrf CORP
source Vlan1
transport udp 9995
template data timeout 60
option application-table timeout 60
!
!
flow monitor NFAMonitorinput
exporter NFAExporter
cache timeout active 60
record NFARecordinput
!
!
flow monitor NFAMonitoroutput
exporter NFAExporter
cache timeout active 60
record NFARecordoutput
!
!
!
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
ip http client source-interface Vlan1
ip tacacs source-interface Vlan1
ip ssh bulk-mode 131072
ip ssh time-out 60
!
!
!
ip radius source-interface Vlan1
ip radius source-interface Vlan1 vrf CORP
logging history alerts
logging trap notifications
logging source-interface Vlan1 vrf CORP
logging host 172.16.100.48 transport udp port 9995
logging host 172.16.100.48
logging host 172.16.100.48 vrf CORP transport udp port 9995

 

 

1 Accepted Solution

Accepted Solutions

Ramprasad2
Level 1
Level 1

Hi team,

anyone help 

View solution in original post

3 Replies 3

this not vrf aware netflow 

I will check right command and send to you

MHM

pls updaate

Ramprasad2
Level 1
Level 1

Hi team,

anyone help