[Flow-tools] Setting up NetFlow on 6509

[Volk,Gregory B]

Have you tried setting the source to a non-vlan (physical or loopback)
interface like:
 
ip flow-export source Loopback0

I don't know if that will fix your issue, but I always source my netflow
data from a loopback interface that is dedicated for management traffic.
 
 



 
 If you are not the intended recipient of this message (including attachments), or if you have received this message in error, immediately notify us and delete it and any attachments.  If you no longer wish to receive e-mail from Edward Jones, please send this request to messages at edwardjones.com.  You must include the e-mail address that you wish not to receive e-mail communications.  For important additional information related to this e-mail, visit www.edwardjones.com/US_email_disclosure
 
________________________________
 


	From: flow-tools-bounces at list.splintered.net
[mailto:flow-tools-bounces at list.splintered.net] On Behalf Of Travis
Formoso
	Sent: Monday, March 08, 2010 9:47 AM
	To: flow-tools at list.splintered.net
	Subject: [Flow-tools] Setting up NetFlow on 6509
	
	
	Hello all,
	
	I am trying to setup a NetFlow product on our 6509. We have a
number of different VLAN's across our network and I think I would want
to monitor those VLAN's and that should capture the traffic on the 6509
(correct me if I am wrong.) The way the product is licensed is by source
(a source is a router or switch.) When I try to setup netflow each VLAN
comes in as a different source and I would like it if I can use the 6509
as just once source. Here are the commands I am using to set this up.
	 
	in configuration mode:
	 
	ip flow-export source vlan10
	ip flow-export version 5
	ip flow-export destination 172.20.200.50 
	 
	Now I configure netflow for switched traffic:
	mls nde sender version 5
	mls flow ip interface-full
	mls nde interface
	 
	On the interface (vlan 10):
	ip route-cache flow
	 
	After doing that I see that incoming traffic is being monitored
by NetFlow, however as said that interface (VLAN) is coming in as a
source, so if I configure another VLAN I now have 2 sources, but I would
like to set this up so the 6509 is just one source, monitoring all the
VLAN's. 
	
	I wanted to know if these commands are correct, if I should be
monitoring the VLAN's and if anyone knows how to set this up as
explained above with the 6509 as one source. 
	 
	Thank you,
	
	Travis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20100308/a04ef2df/attachment.htm