Netflow on Cat 4510R+E with IOS-XE

j.tandel · ‎02-12-2012

I am trying to figure out the Flexible Net-flow on Cat 4510R+E Switch running IOS-XE code. My Neflow flow software is manageengine 7.X. I am able to see the netflow interfaces but the traffic itself is not displayed. On the Switch I can see the netflow exporter statistics counter being incremented thereby confirming as being exported.

Could anyone help me out on this ?

Don Jacob · ‎02-14-2012

Hi,

Are you using the netflow-original record or have you created a custom flow record? For a custom record, ensure all necessary data fields have been added. A sample config for a custom record is as below:

cisco_281(config)#flow record ManageEngineRec

cisco_281(config-flow-record)#match ipv4 source address

cisco_281(config-flow-record)#match ipv4 destination address

cisco_281(config-flow-record)#match transport source-port

cisco_281(config-flow-record)#match transport destination-port

cisco_281(config-flow-record)#match interface input

cisco_281(config-flow-record)#match ipv4 protocol

cisco_281(config-flow-record)#match ipv4 tos

cisco_281(config-flow-record)#match ipv4 dscp

cisco_281(config-flow-record)#match application name

cisco_281(config-flow-record)#collect routing source as

cisco_281(config-flow-record)#collect routing destination as

cisco_281(config-flow-record)#collect routing next-hop address ipv4

cisco_281(config-flow-record)#collect transport tcp flags

cisco_281(config-flow-record)#collect counter bytes

cisco_281(config-flow-record)#collect counter packets

cisco_281(config-flow-record)#collect timestamp sys-uptime first

cisco_281(config-flow-record)#collect timestamp sys-uptime last

cisco_281(config-flow-record)#collect interface output

cisco_281(config-flow-record)#collect flow direction

cisco_281(config-flow-record)#collect ipv4 id

cisco_281(config-flow-record)#collect ipv4 source mask

cisco_281(config-flow-record)#collect ipv4 destination mask

If this does not work, please try with the "netflow-original" record. You can see the config example under the sample config section in the below blog (though it is for Nexus, the flow record, exporter and monitor part should work)

https://blogs.manageengine.com/netflowanalyzer/2010/05/06/cisco-nexus-and-netflow-analyzer-bandwidth-monitoring

If that too fails, support team at ManageEngine (netflowanalyzer-support@manageengine.com) should be able to help.

Regards,

Don Thomas Jacob

www.netflowanalyzer.com

NOTE: Please rate posts and close questions if your query has been answered

Regards, Don Thomas Jacob http://www.solarwinds.com/netflow-traffic-analyzer.aspx Head Geek @ SolarWinds NOTE: Please rate and close questions if you found any of the answers helpful.

jakewilson · ‎02-14-2012

Hello,

I hope Don's suggestion helps.

If you can't get it working, send me a packet capture and I'll run it through Scrutinizer NetFlow Analyzer to see if i can figure it out.

Jake