Skip to content

Instantly share code, notes, and snippets.

@PhilipSchmid
Created December 19, 2018 08:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save PhilipSchmid/a83f5e6ee61201d9a1b2c07908fa21ad to your computer and use it in GitHub Desktop.
Save PhilipSchmid/a83f5e6ee61201d9a1b2c07908fa21ad to your computer and use it in GitHub Desktop.
Cisco IPv4 and IPv6 Netflow Example Configuration (Nexus 5k)
feature netflow

flow exporter elastic-exp
  description elasticsearch exporter
  destination 10.10.10.10 use-vrf XY
  transport udp 9995
  source Vlan123
  dscp 0
  version 9
    template data timeout 180

flow record ipv4-netflow
  description IPv4 input NetFlow with origin ASs
  match ipv4 source address
  match ipv4 destination address
  match ip protocol
  match ip tos
  match transport source-port
  match transport destination-port
  collect routing source as
  collect routing destination as
  collect routing next-hop address ipv4
  collect transport tcp flags
  collect counter bytes
  collect counter packets
  collect timestamp sys-uptime first
  collect timestamp sys-uptime last

flow record ipv6-netflow
  description IPv6 input NetFlow with origin ASs
  match ipv6 source address
  match ipv6 destination address
  match ip protocol
  match ip tos
  match transport source-port
  match transport destination-port
  collect routing source as
  collect routing destination as
  collect routing next-hop address ipv6
  collect transport tcp flags
  collect counter bytes
  collect counter packets
  collect timestamp sys-uptime first
  collect timestamp sys-uptime last

flow monitor elastic-mon-ipv4
  exporter elastic-exp
  record ipv4-netflow

flow monitor elastic-mon-ipv6
  exporter elastic-exp
  record ipv6-netflow

sampler elastic-sam
  mode 1 out-of 1

interface vlan100
  ip flow monitor elastic-mon-ipv4 input sampler elastic-sam
  ipv6 flow monitor elastic-mon-ipv6 input sampler elastic-sam
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment