Sup 720 +IOS + netflow ?

[dclee]

I am looking to enable netflow on our 6513E core switch. We run sup 720's IOS enabled.

Are there netflow limitations on the SUP card ? Essentially we have 2 buildings connected via fiber

and each floor is a vlan that is connected back to the 6513.

One interface on the 6513 is connected to the inside interface of our ASA and I would like to get netflow stats off that

L2 interface for internet traffic outbound. Is that possible ?

I would also like to pull netflow stats of each vlan L3 interface to give me top talkers etc from each floor. Is that also possible ?

Any help would be appreciated.

Cheers

Dave

[glen.grant · Accepted solution]

  You should be able to do what you are asking , refer to this page 

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080721701.shtml

[Reza Sharifi]

Dave,

What type of Sup-720 do you have?

Sup-720-3BXL provides 256,000 NetFlow entries.

http://www.cisco.com/en/US/products/hw/modules/ps2797/products_data_sheet09186a008033a479.html

HTH

[dclee]

Just a couple of Sup 720 3B - Non XL

[Reza Sharifi]

Should not be a problem. For 3B, it is 128000.

See table-1 in this link:

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet09186a0080159856_ps4835_Products_Data_Sheet.html

HTH

[dclee]

So 128000 entries, what exactly does that mean ? Is each connection an entry ?

[Don Jacob]

That is the number of NetFlow entries (flow records) a device's cache  can hold. Each entry refers to an IP traffic conversation based on the  key fields.

There are 7 key fields:

1 and 2.Source and Destination IP Address

3 and 4. Source and Destionation port number

5. Layer 3 Protocol

6. Source ifindex

7. ToS

Each  IP traffic which is active has a flow record in the cache. The flow  record is created based on the key fields, ie. if all the key fields are  same and the flow is active, it is added to the same flow record and  then exported from the cache based on timeouts.

Regards,

Don Thomas Jacob

www.netflowanalyzer.com

NOTE: Please rate posts and close questions if your query has been answered