Solved: Sup 720 +IOS + netflow ?

dclee · ‎03-01-2012

I am looking to enable netflow on our 6513E core switch. We run sup 720's IOS enabled.

Are there netflow limitations on the SUP card ? Essentially we have 2 buildings connected via fiber

and each floor is a vlan that is connected back to the 6513.

One interface on the 6513 is connected to the inside interface of our ASA and I would like to get netflow stats off that

L2 interface for internet traffic outbound. Is that possible ?

I would also like to pull netflow stats of each vlan L3 interface to give me top talkers etc from each floor. Is that also possible ?

Any help would be appreciated.

Cheers

Dave

glen.grant · ‎03-01-2012

You should be able to do what you are asking , refer to this page

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080721701.shtml

View solution in original post

glen.grant · ‎03-01-2012

You should be able to do what you are asking , refer to this page

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080721701.shtml

Reza Sharifi · ‎03-01-2012

Dave,

What type of Sup-720 do you have?

Sup-720-3BXL provides 256,000 NetFlow entries.

http://www.cisco.com/en/US/products/hw/modules/ps2797/products_data_sheet09186a008033a479.html

HTH

dclee · ‎03-01-2012

Just a couple of Sup 720 3B - Non XL

Reza Sharifi · ‎03-01-2012

Should not be a problem. For 3B, it is 128000.

See table-1 in this link:

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet09186a0080159856_ps4835_Products_Data_Sheet.html

HTH

dclee · ‎03-01-2012

So 128000 entries, what exactly does that mean ? Is each connection an entry ?

Don Jacob · ‎03-16-2012

That is the number of NetFlow entries (flow records) a device's cache can hold. Each entry refers to an IP traffic conversation based on the key fields.

There are 7 key fields:

1 and 2.Source and Destination IP Address

3 and 4. Source and Destionation port number

5. Layer 3 Protocol

6. Source ifindex

7. ToS

Each IP traffic which is active has a flow record in the cache. The flow record is created based on the key fields, ie. if all the key fields are same and the flow is active, it is added to the same flow record and then exported from the cache based on timeouts.

Regards,

Don Thomas Jacob

www.netflowanalyzer.com

NOTE: Please rate posts and close questions if your query has been answered

Regards, Don Thomas Jacob http://www.solarwinds.com/netflow-traffic-analyzer.aspx Head Geek @ SolarWinds NOTE: Please rate and close questions if you found any of the answers helpful.