Configuring Flow Exports on Cisco Catalyst 6000 Series Switches
For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller.
Cisco Catalyst 6000 Series Switches follow NetFlow v9. Enter privileged mode on the Supervisor Engine and issue the following commands to configure NetFlow data export (NDE):
| Command | Purpose |
|---|---|
| set mls nde {hostname|ip_address} 9996 | Specifies Site24x7 On-Premise Poller as the NDE collector and the configured Netflow listener port as the User Datagram Protocol (UDP) port for data export of hardware-switched packets. |
| ip flow-export destination {hostname|ip_address}9996 | Specifies Site24x7 On-Premise Poller as the NDE collector and the configured Netflow listener port as the UDP port for data export of software-switched packets. * |
| set mls agingtime long 64 |
Breaks up long-lived flows into 1-minute fragments. This ensures that traffic graphs do not have spikes. It is important to set this value to 1 minute in order to generate alerts and view troubleshooting data. |
| set mls agingtime 32 | Ensures that flows that have finished are periodically exported. Ensure that the set value is not too low. |
| set mls flow full | Sets the flow mask to full flows. This is required to get useful information from the switch. |
| set mls nde enable | Enables NDE. |
*To monitor data and statistics about Layer 3 traffic that is switched in software by the Multilayer Switch Feature Card (MSFC), you must specify the NDE collector and UDP port on the MSFC.
This requires that you enter the ip flow-export destination command on the MSFC.
Use the show mls debug command to debug the NDE configuration.