Cisco Catalyst 4500 series Administration Manual page 1593

Chapter 65 Configuring Flexible NetFlow
The following configuration is not allowed:
!
interface GigabitEthernet 3/1
On a given target monitoring Layer 2 and Layer 3, simultaneous traffic is not supported:
11.
!
12. Selection of Layer 2 and Layer 3 packet fields in a single flow record definition is not allowed.
However, ingress 802.1Q VLAN Id of packet and Layer 3 packet field selection is allowed.
13. To attach a monitor to port or port-vlan targets, a flow record matching on ingress 802.1Q VLANId
key field, must match on input interface also as key field.
Note
Flow monitor matching on ingress 802.1Q VLANId as key field cannot be attached on a VNET trunk
14.
port target.
Only permanent and normal flow cache types are supported.
15.
Supervisor Engine 8-E, Supervisor Engine 7-E, Supervisor Engine 7L-E, and Catalyst 4500X do not
16.
support:
–
–
Packet length or TTL options are not supported with the ToS option.
17.
The VSS active and standby switches independently export flows, to the same or different Netflow
18.
collectors depending on flow exporter configuration. An IP route to the Netflow collector must exist
and it is should be reachable from the VSS for flow export.
At the collector, the flow sequence numbers are local to a switch and will be monotonically
19.
increasing for each member of VSS. Additionally, the SourceId field of the v9 export packet
uniquely identifies the VSS switch number that it was exported from.
The configuration of the flow exporter does not support the option output features.
20.
Maximum number of VRFs that can be used for the flow exporter destination address configuration
21.
in VSS is 5. This limit includes the Global Routing Table and is common across all flow exporters
in the VSS.
For example, when the user tries to configure an exporter destination address using a sixth VRF limit
is exceeded, the following warning is displayed:
flow exporter e10
%%Warning - Netflow exporter on Cat4k VSS switch cannot exceed a total max of 5 vrfs
used for destination address
configuration. Flow exporter e10 cannot export in vrf blue.
OL_28731-01
ip flow monitor <name> input
ipv6 flow monitor <name> input
!
ip flow monitor m1 input
ip flow monitor m2 input
interface channel-group 1
datalink flow monitor m1 input
ip flow monitor m2 input
The match datalink dot1q vlan input option is inavailable prior to IOS Release XE 3.3.0; you
would only see the input option starting with the IOS Release XE 3.3.0.
predefined records like traditional routers (record netflow ipv4 original-input)
flow-based sampler.
destination 20.1.20.4 vrf blue
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
VSS Environment
65-3