Hello,
we have on a VSS seven ethernet Layer 3 connections (OSPF) to our branch offices. As the Sup2T has improved netflow capabilities we have following configuration:
flow record CORE-FLOW
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match flow direction
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
!
flow exporter NETMANAG
destination 192.168.1.1
transport udp 9996
!
flow platform cache timeout fast
!
flow monitor CORE-MONITOR
record CORE-FLOW
exporter NETMANAG
interface GigabitEthernet2/3/1
description LAN 3856766
no switchport
ip address xxx.xxx.xxx 255.255.255.252
ip flow monitor FLOW-MONITOR input
ip flow monitor FLOW-MONITOR output
ip ospf dead-interval 15
ip ospf hello-interval 3
speed 100
duplex full
.
.
.
interface GigabitEthernet2/3/7
description LAN 3856773
no switchport
ip address xxx.xxx.xxx 255.255.255.252
ip flow monitor FLOW-MONITOR input
ip flow monitor FLOW-MONITOR output
We use the NetFlow Analzer 9.6 Professional. There are two problems with the flows from this VSS:
1. All flows are being displayed as a single Interface (IfIndex-1) and not 7 separately interfaces.
2. The flows from the VSS are only ingress no egress flows are recorded
Is there something wrong with the configuration above?
Thank you.
Chris