[c-nsp] Newbie assistance about filtering netflow export

Hank Nussbacher hank at interall.co.il
Fri Mar 3 01:03:40 EST 2023


I hope someone here has done this.


On IOS-XR I want the ability to filter certain IP ranges when doing a 
Netflow export.

I have looked here:

https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-5/netflow/configuration/guide/b-netflow-cg-asr9k-65x/b-netflow-cg-asr9k-65x_chapter_010.html#concept_B74CBEBA76D8461C9044B586AA873791


and see there is this:

|ipv4 access-list nf_ex 10 permit ipv4 192.168.1.1/24 any capture Is 
this the ACL that indicates which prefixes to export via Netflow and all 
others are dropped? This applies to both src and dst for this IP range 
listed? All other IP ranges are dropped? |

|flow monitor-map fmm1 record ipv4 option filtered |
Is "option filtered" the trick that is needed?  Where can I read more about this option?

||interface 10GE0/0/0/1 ipv4 access-group nf_ex_ing Where in the page 
was defined ||||nf_ex_ing? I thought it was |||nf_ex|.

The only Cisco doc I found that discusses "option filtered" is:
https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-5/netflow/configuration/guide/b-netflow-cg-asr9k-65x/b-netflow-cg-asr9k-65x_chapter_010.html

Any clue appreciated.

Thanks,
Hank
||||




More information about the cisco-nsp mailing list