21 October, 2014

Netflow configuration for Prime Infrastructure 2.1 and Cisco CSR1000V

A note- in theory you need an Assurance license to use netflow-enabled devices in Prime.
However the Licenses section in Prime web UI shows that only Lifecycle licenses have been used by the netflow devices.

flow record type performance-monitor perfmon
 match policy performance-monitor classification hierarchy
 collect application http url
 collect application http host
 collect application http referer
!
!
flow exporter flowexporter
 destination 10.113.114.99
 source GigabitEthernet1
 ttl 5
 transport udp 9991
 export-protocol netflow-v5
!
!
flow monitor flowmonitor
 exporter flowexporter
 statistics packet protocol
 statistics packet size
 record netflow-original
!
interface GigabitEthernet1
 ip flow monitor flowmonitor input
 ip flow monitor flowmonitor output

You can check if the Netflow listening port on the Prime IS VM is 9991 with command:
primeva/admin# sh ports
Process : rpc.statd (3559)
     tcp: 0.0.0.0:773
     udp: 0.0.0.0:770, 0.0.0.0:767
Process : rsyslogd (11816)
     tcp: 0.0.0.0:65000, :::65000
     udp: 0.0.0.0:8514, :::8514
Process : portmap (3514)
     tcp: 0.0.0.0:111
     udp: 0.0.0.0:111
Process : Decap_main (5226)
     tcp: 127.0.0.1:2000
     udp: :::514, :::162
Process : Xvfb (5042)
     tcp: 0.0.0.0:6100, :::6100
Process : sshd (3930)
     tcp: 0.0.0.0:22, :::22
Process : sam_daemon (6159)
     tcp: 0.0.0.0:2012
     udp: 127.0.0.1:47044
Process : java (6086)
     tcp: :::11011, :::11012, :::11013, :::11014, :::8009, :::1199, :::80, :::16
113, :::2001, :::61617, :::45265, :::61237, :::443
     udp: :::9991, :::57612, :::25361, :::29245, :::37492

No comments:

Post a Comment