Solved

Cisco Netflow on Sub-Interfaces

Posted on 2014-07-22
5
701 Views
Last Modified: 2014-07-24
Hello Experts,

I never really understood if its necessary to configure netflow on sub-interfaces or just on the physical interface. For example, our WAN circuit is physically connected to Gi 0/0. We have sub-interface of Gi0/0/2928. Both interfaces are currently configured as follows:

interface GigabitEthernet0/0
 no ip address
 load-interval 30
 duplex full
 speed 10

interface GigabitEthernet0/0.2938
 description BT MPLS CID SHI/CU-SHI/BT NP432 (supplier 2013-04655-k01)
 encapsulation dot1Q 2938
 ip address 10.1.243.38 255.255.255.252
 no ip unreachables
 ip flow ingress
 ip flow egress
 ip virtual-reassembly in
 no cdp enable
 service-policy output Shape-Ethernet-QoS
end

As you can see, netflow is configured on the sub-interface but we don't have it configured on our physical interface. Should we have it configured on both?

Regards

Carlton
0
Comment
Question by:cpatte7372
  • 2
  • 2
5 Comments
 
LVL 22

Accepted Solution

by:
Jody Lemoine earned 500 total points
ID: 40212884
Enabling Netflow on the physical interface will capture everything going through it and its sub-interfaces. Enabling it only on the sub-interface will capture only what traverses the sub-interface. If you have only one sub-interface for 802.11q processing, then it makes no difference which one you have it on, but enabling it on both will create double entries for the same flows.
0
 
LVL 22

Expert Comment

by:eeRoot
ID: 40213104
Are there any other sub interfaces that you want to monitor?  And do you want to monitor the L3 traffic that is going through the physical interface such as routing protocols and link status packets?
0
 

Author Comment

by:cpatte7372
ID: 40216485
Hi Jody, thats great.

eeRoot, there are no other sub-interfaces I want to monitor.

Cheers
0
 
LVL 22

Expert Comment

by:Jody Lemoine
ID: 40216596
Glad I could help. Is there anything else that needs clarification or are you good with the answers provided?
0
 

Author Closing Comment

by:cpatte7372
ID: 40216725
Cheers
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a guide to configure bridging on Cisco Routers.  This is something I never knew was possible until after making a few phone calls to Cisco.  Using bridging saved our company money by not requiring us to purchase a new switch.  Bridgi…
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question