Cisco Catalyst 3560-X Software Configuration Manual page 1224

Configuring Flexible NetFlow
•
You can configure unidirectional flow (destination or source-address based flows), and you can also
configure flow aging. These features are supported on the network services module:
•
•
•
These NetFlow characteristics are not supported:
•
•
•
•
•
Although other modules that can be installed in the Catalyst 3750-X and 3560-X have 1-Gigabit and
10-Gigabit uplink interfaces, NetFlow is supported only on the network services module.
Configuring Flexible NetFlow
These are some basic Flexible NetFlow configurations.
•
•
•
•
•
For more information about Flexible NetFlow, see the Cisco IOS Flexible NetFlow Configuration Guide:
http://www.cisco.com/en/US/docs/ios/fnetflow/configuration/guide/12_4t/fnf_12_4t_book.html
For information about the commands, see the Cisco IOS Flexible NetFlow Command Reference:
http://www.cisco.com/en/US/docs/ios/fnetflow/command/reference/fnf_book.html
Configuring a Customized Flow Record
You can match these key fields for the flow record:
•
•
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-2
Flow samplers reduce the load that Flexible NetFlow puts on the networking device to monitor
traffic by limiting the number of packets that are analyzed.
You can configure collection statistics for Layer 2-switched (nonrouting) traffic, Layer 3 IPv4 and
IPv6 traffic, and Layer 4 TCP, IGMP, and ICMP traffic.
NetFlow counting, maintenance, troubleshooting (debugging commands).
NetFlow analysis is performed on traffic crossing the physical interfaces on the network services
module. The switch processes egress (outbound) traffic after forwarding decisions are performed.
You can force locally switched or routed traffic through service module ports by configuring private
VLANs or protected ports.
Netflow-5 protocol
Predefined flow records
ISL
Policy-based NetFlow
Cisco TrustSec monitoring
Configuring a Customized Flow Record, page 1-2
Configuring the Flow Exporter, page 1-5
Configuring a Customized Flow Monitor, page 1-6
Applying a Flow Monitor to an Interface, page 1-7
Configuring and Enabling Flow Sampling, page 1-9
IPv4 or IPv6 destination address
Datalink fields to identify Layer 2 source and destination address and VLAN for traffic entering or
leaving the interfaces, providing the MAC address of the directly connected host. Class of Service
(CoS) and Ethertype datalink header fields are also available.
Chapter 1 Configuring Flexible NetFlow
OL-25303-03