cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
489
Views
0
Helpful
1
Replies

Netflow on CRS-3

Hi

We are implementing DDoS solution in our network and the netflow protocol is lunch on core routers - the CRS-3

I've got the folloing monitor-map:

flow monitor-map arbor-ddos-mpls

record mpls ipv4-fields

exporter arbor-ddos

cache timeout active 30

cache timeout inactive 15

!

The point is that CRS-3 is sending netflow record to DDoS system  ( arbor) with the records from MPLS VPN service.

I would like to filter force CRS-3 to not to send this MPLS VPN netflow information.

is there any chance to do it ? I was thinking about :

record mpls ipv4-fields labels 1

but is it only for labels  to be used for hashing

I would be appreciated for any help

Kind Regards

Marcin

1 Reply 1

Nicolas Fevrier
Cisco Employee
Cisco Employee

Hi Marcin,

Unfortunately, if you try to sample an MPLS+IPv4 packet and only send the IPv4 part in the records, it's not possible with IOS-XR,

Best Regards,

N.