[c-nsp] IOS-XR and Netflow filtering?

Saku Ytti saku at ytti.fi
Wed Dec 29 02:14:23 EST 2021


On Tue, 28 Dec 2021 at 11:36, Hank Nussbacher <hank at interall.co.il> wrote:

> Using just IOS-XR, is one able to filter out Netflow records (example)
> based solely on IP address, so flows are not recorded if any record
> starts with 192.168.*.* ?  If not, is there an external box one can buy
> that can do that?

I don't think it is possible in IOS-XR. This is a very typical
difference in IOS and JunOS, where IOS makes very laser focused
features that do exactly one thing, JunOS does expressive features
that can be used to implement the specific one thing, which leaves
sometimes customers doing something emergent that even Juniper didn't
think of, but the expressive architecture allows for.
In this specific case, in Juniper you can do netflow via filter terms,
so you could first permit all SIP with 192.168/16, then 2nd term
permit+sample rest.

-- 
  ++ytti


More information about the cisco-nsp mailing list