How to configuration the Cisco Catalyst 2960X Switches NetFlow-Lite

As networks become more complex and organizations enable more applications, traffic patterns become more diverse and unpredictable. Organizations require better visibility into network traffic in a manageable way. It is crucial for network operators to obtain information about where, why, when, how, and by whom specific applications are used and how the usage might affect the network. This information is vital to enhancing operational efficiency and optimizing operational costs. Cisco NetFlow technology is one of the most scalable ways to provide this information throughout your network infrastructure. NetFlow-Lite introduces traffic visibility on the Cisco 2960X, 2960XR, 2960-CX, and 3560-CX Series Switches for the first time.

The following steps illustrate NetFlow-Lite configuration on the Cisco Catalyst 2960-X, 2960-XR, 2960-CX, and 3560-CX Series Switches:

Step 1.   Configure a Flow Record, which defines the data collection. You can customize it for specific requirements. You can use the following example with most NetFlow collectors:

flow record v4

 match ipv4 tos

 match ipv4 protocol

 match ipv4 source address

 match ipv4 destination address

 match transport source-port

 match transport destination-port

 collect transport tcp flags

 collect interface input

 collect flow sampler

 collect counter bytes long

 collect counter packets long

 collect timestamp sys-uptime first

 collect timestamp sys-uptime last

Step 2.   Configure a Flow Exporter, which defines where the collected data needs to be sent. Please refer to the NetFlow collector application user guides and manual for specific details such as port number, differentiated services code point (DSCP), and other options. The configuration follows:

flow exporter Replicator

 description Exporter to Cisco Prime 2.0

 destination 10.2.44.12

 source GigabitEthernet1/0/1

 dscp 16

 template data timeout 60

 option interface-table

Step 3.   Configure a Flow Monitor, which binds the flow record and exporter along with options to configure the flow cache:

flow monitor v4

 record v4

 exporter Replicator

 cache timeout active 30

Step 4.   Configure a Flow Sampler. Define the sampling technique and sample size. The configuration follows:

sampler v4

 mode random 1 out-of 32

Step 5.   Attach the Flow Monitor and Sampler to the interface:

interface GigabitEthernet1/0/1

 ip flow monitor v4 sampler v4 input

More related topics

The Feature of Cisco Catalyst 2960-X Series

WS-C2960X-24TS-L VS WS-C2960X-24TS-LL

Compares the SDM Templates on the Cisco 2960X Series Switches