[c-nsp] ASR 1000 series again: Netflow export
Elmar K. Bins
elmi at 4ever.de
Thu May 14 05:06:38 EDT 2009
Admitted, I am still running a Cisco Labs software version,
so my main concern is the question "has this been addressed
and fixed in an IOS version?"
The issue:
I want to export netflow data over the management interface (Gi0)
on an ASR1002 (this has to go through a VPN tunnel).
Configuration:
ip flow-export source GigabitEthernet0
ip flow-export destination 172.16.31.250 12001
rt#sh ip route vrf Mgmt-intf
S* 0.0.0.0/0 [1/0] via 172.16.199.1
(...)
But:
rt#sh ip flow export
Flow export v5 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) ***.***.***.*** (GigabitEthernet0/0/0)
Destination(1) 172.16.31.250 (12001)
Version 5 flow records, origin-as
Cache for as aggregation:
Flow export is disabled
8007185179 flows exported in 345108888 udp datagrams
Err - I specified the source interface, right? Stupid box!
Oh, btw - I cannot add a "vrf Mgmt-intf" to the flow-export
source statement...yes, I tried that ;)
So, what happens if we for example...
rt(config)#ip route 172.16.31.250 255.255.255.255 null0
rt#sh ip flow export
Flow export v5 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) 172.16.199.5 (Unknown)
Destination(1) 172.16.31.250 (12001)
Version 5 flow records, origin-as
Cache for as aggregation:
Flow export is disabled
8007251179 flows exported in 345111724 udp datagrams
Eh? "Unknown"? Well, sure, in _that_ VRF yes. That's why
I'd like to change it...err...well...
Is this supposed to be this kind of stupid? Or has
that simply been fixed in later IOS versions (this
one is based on 12.2(33)XNB )?
There are of course more VRF issues on that platform.
Tacacs requires a special solution etc. etc...
So, if anyone can point me in the right direction or
just recommend the IOS this has been fixed in (still
have to check it for the Mac accounting/reboot issue
and the CEF balancing lopsidedness), your help is much
appreciated.
Cheers,
Elmar.
PS: If anyone knows how to keep "write mem" from using
like 20 seconds to save the config...
More information about the cisco-nsp
mailing list