Cisco Catalyst 4500 Series Software Configuration Manual page 1846

Non-VSS Environment
Note
10. Only permanent and normal flow cache types are supported.
Supervisor Engine 8-E, Supervisor Engine 7-E, Supervisor Engine 7L-E, and Catalyst 4500X do not
11.
support:
On VLAN interfaces, when you use the interface option with the Cos,Tos, TTL or Packet length
12.
options, the system displays inaccurate results for the interface input field.
13. The configuration of the flow exporter does not support the option output features.
14. Flow aging in flow cache is controlled through active and in-active timer configuration. The
minimum for active and in-active aging timers is 5 seconds. The timers must be in units of 5 seconds.
Note
First and Last-seen flow timestamp accuracy is within 3 seconds.
15.
16. 2048 Flow monitors and records are supported.
When TTL is configured as a flow field, the following values are reported for a given packet TTL
value.
17. Cisco TrustSec (CTS) fields are supported. These fields use Netflow collector to monitor and
troubleshoot the CTS network, and to segregate traffic based on source group tag (SGT) values.
Table 74-4
Packet TT Value
0
1
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
74-10
Flow monitor matching on ingress 802.1Q VLAN Id as the key field cannot be attached on a
VNET trunk port target.
– predefined records like traditional routers (record netflow ipv4 original-input)
– flow based sampler.
Flows in the hardware table are deleted after 5 seconds of in-activity irrespective of the active
or in-active timer configuration values. This allows you to create new hardware flows quickly.
Table 74-4 lists the packet TTL and reported values.
When configuring the source group tag (collect flow cts source group-tag), note the following:
–
The system copies the packets to software before it retrieves the CTS field. A large number of
flows mean that a large number of packets are copied to the software, possibly affecting CPU
performance.
The maximum number of (unique) hosts allowed in the switch (IP addresses) is 12,000.
In case of burst packets, the software may not be able to retrieve the CTS field because the
software queue is throttled.
When configuring the destination group tag (collect flow cts destination group-tag), note that
–
this CTS field value is collected only if you have already configured an IP-to-SGT mapping.
When configuring switch-derived source group tags (collect flow cts switch derived-sgt), note
–
that the switch derives this value locally.
When configuring CTS fields on Supervisor Engine 8-E, note that CTS fields are not supported
–
on wireless interfaces (WLAN) and SSID.
TTL Map: TTL Configured
Reported Value
0
1
Chapter 74 Configuring Flexible NetFlow