cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
512
Views
4
Helpful
2
Replies

Flexible Netflow Config @ 6500 for ip accounting

blackswans
Level 1
Level 1

Hi,

Does anyone have a configuration for flexible netflow config for ip accounting?

Thanks.

2 Replies 2

Lei Tian
Cisco Employee
Cisco Employee

Hi,

What field would you like to monitor from flexible netflow? Do you want use netflow to capture IPs and byte count only, like you have from IP accounting?

HTH,
Lei Tian

HTH,
Lei Tian

Sent from Cisco Technical Support iPhone App

jakewilson
Level 1
Level 1

Hi Blackswans,

Lei Tian is correct.  What do you want to collect and export?  If you just want IP addresses and the total bytes. A configuration something like this will work.

!step 1 create the record 'ip-accounting-record'

flow record ip-accounting-record

match ipv4 source address

collect counter bytes

!step 2 create the monitor 'ip-accounting-exporter'

flow monitor ip-accounting-exporter

destination 10.10.10.10

source loopback 0

transport udp 2055

template data timeout 60

!step 3 create the monitor by tying the record to the exporter

flow monitor ip-accounting-monitor

record ip-accounting-record

exporter ip-accounting-exporter

cache timeout active 60

!step 4 apply the monitor to each interface

interface fastethernet0/0

ip flow monitor ip-accounting-monitor input

interface fastethernet0/1

ip flow monitor ip-accounting-monitor input

interface fastethernet0/2

ip flow monitor ip-accounting-monitor input

Then, you will need a good Flexible NetFlow collector.  I recommend Scrutinizer as it can dynamically handle unique templates like this.

Jake

www.NetFlowKnights.com

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card