01-20-2010 06:22 AM - edited 03-06-2019 09:22 AM
Hi,
I enabled Netflow on a cat 6500 and specified NDE version 7 using the command : CH01SW06(config)#mls nde sender version 7
I receive version 7 Netflow packets on my Netflow collector for all hardware-switched flow. However, for software-switched flows (i.e packets that are received on an HSRP address and resent on the same interface) Netflow delivers updates in version 1 !
What is the reason and how can I make sure that these packets also arrive in version 7 ? Even if the software-switched flows are minor, the Netflow collector application generate an alarm because the application expects version 5 or version 7 ...
Thank you
Yves
Solved! Go to Solution.
01-20-2010 07:07 AM
Hello Yves,
according to the usual configuration guide you need to configure also for NDE export from MSFC and you can use aggregation caches if desired
NDE on the MSFC exports statistics for flows routed in software. The MSFC supports NetFlow aggregation, described in this document:
Cisco IOS NetFlow Configuration Guide.
The MSFC also supports NetFlow ToS-based router aggregation, described in this document:
Cisco IOS NetFlow Configuration Guide.
Release 12.2(18)SXF and later releases support NetFlow sampling on the MSFC, described in this document:
Cisco IOS NetFlow Configuration Guide.
so additional commands are needed like in a standalone router
something like:
conf t
ip flow export version 5 origin-as
Hope to help
Giuseppe
01-20-2010 07:07 AM
Hello Yves,
according to the usual configuration guide you need to configure also for NDE export from MSFC and you can use aggregation caches if desired
NDE on the MSFC exports statistics for flows routed in software. The MSFC supports NetFlow aggregation, described in this document:
Cisco IOS NetFlow Configuration Guide.
The MSFC also supports NetFlow ToS-based router aggregation, described in this document:
Cisco IOS NetFlow Configuration Guide.
Release 12.2(18)SXF and later releases support NetFlow sampling on the MSFC, described in this document:
Cisco IOS NetFlow Configuration Guide.
so additional commands are needed like in a standalone router
something like:
conf t
ip flow export version 5 origin-as
Hope to help
Giuseppe
01-20-2010 08:40 AM
Giuseppe,
You are right, the exact command is : CH01SW05(config)#ip flow-export version 5
Now, I see version 5 packets for software routed flows.
Thanks again
Yves
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide