Solved

Cisco Netflow on Sub-Interfaces

Posted on 2014-07-22
5
757 Views
Last Modified: 2014-07-24
Hello Experts,

I never really understood if its necessary to configure netflow on sub-interfaces or just on the physical interface. For example, our WAN circuit is physically connected to Gi 0/0. We have sub-interface of Gi0/0/2928. Both interfaces are currently configured as follows:

interface GigabitEthernet0/0
 no ip address
 load-interval 30
 duplex full
 speed 10

interface GigabitEthernet0/0.2938
 description BT MPLS CID SHI/CU-SHI/BT NP432 (supplier 2013-04655-k01)
 encapsulation dot1Q 2938
 ip address 10.1.243.38 255.255.255.252
 no ip unreachables
 ip flow ingress
 ip flow egress
 ip virtual-reassembly in
 no cdp enable
 service-policy output Shape-Ethernet-QoS
end

As you can see, netflow is configured on the sub-interface but we don't have it configured on our physical interface. Should we have it configured on both?

Regards

Carlton
0
Comment
Question by:cpatte7372
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 22

Accepted Solution

by:
Jody Lemoine earned 500 total points
ID: 40212884
Enabling Netflow on the physical interface will capture everything going through it and its sub-interfaces. Enabling it only on the sub-interface will capture only what traverses the sub-interface. If you have only one sub-interface for 802.11q processing, then it makes no difference which one you have it on, but enabling it on both will create double entries for the same flows.
0
 
LVL 22

Expert Comment

by:eeRoot
ID: 40213104
Are there any other sub interfaces that you want to monitor?  And do you want to monitor the L3 traffic that is going through the physical interface such as routing protocols and link status packets?
0
 

Author Comment

by:cpatte7372
ID: 40216485
Hi Jody, thats great.

eeRoot, there are no other sub-interfaces I want to monitor.

Cheers
0
 
LVL 22

Expert Comment

by:Jody Lemoine
ID: 40216596
Glad I could help. Is there anything else that needs clarification or are you good with the answers provided?
0
 

Author Closing Comment

by:cpatte7372
ID: 40216725
Cheers
0

Featured Post

Business Impact of IT Communications

What are the business impacts of how well businesses communicate during an IT incident? Targeting, speed, and transparency all matter. Find out more in this infographic.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question