Skip to content

Configuring NetFlow on Cisco UCS Emulator

 

Cisco UCS UCSM NetFlow
Cisco UCS UCSM NetFlow

Using the below two links for documentation was able to setup NetFlow on a UCS Emulator (v2.2(3a)). See above result in UCSM. 

Cisco UCS Manager CLI Configuration Guide, Release 2.2

Cisco UCS NetFlow Support

Had to make a few slight adjustments to what is listed to cut and paste from Cisco UCS Manager CLI Configuration Guide, Release 2.2 and those are listed below. Looking forward to getting this working on a real UCS.
# Configuring a Flow Record Definition

# L2 Keys

scope eth-flow-mon
enter flow-record r1
set keytype l2keys
set l2keys src-mac-address dest-mac-address ethertype
set nonkeys counter-bytes-long counter-packets-long sys-uptime-first sys-uptime-last
commit-buffer

# L3 Keys

scope eth-flow-mon
enter flow-record r2
set keytype ipv4keys
set ipv4keys ipv4-src-address ipv4-dest-address src-port dest-port ip-protocol ip-tos
set nonkeys counter-bytes-long counter-packets-long sys-uptime-first sys-uptime-last
commit-buffer

# Configuring an Exporter Profile
# 192.168.226.128-129 are FI Management IP’s.
# I don’t get the vlan entry for this, since management IP’s are plugging into access ports.

scope eth-flow-mon
scope flow-profile default
enter vlan 1
enter fabric a
set addr 192.168.226.128 subnet 255.255.255.0
up
enter fabric b
set addr 192.168.226.129 subnet 255.255.255.0
commit-buffer

# Configuring a Netflow Collector
# set addr 172.1.1.10 is server to send NetFlow data to
# set exporter-gw 192.168.226.1 is gateway for management IP’s on FI’s

scope eth-flow-mon
enter flow-collector c1
set dest-port 9991
set vlan default
enter ip-if
set addr 172.1.1.10
set exporter-gw 192.168.226.1
commit-buffer

# Configuring a Flow Exporter

scope eth-flow-mon
enter flow-exporter ex1
set dscp 6
set flow-collector c1
set exporter-stats-timeout 600
set interface-table-timeout 600
set template-data-timeout 600
commit-buffer

# Configuring a Flow Monitor

scope eth-flow-mon
enter flow-monitor m1
set flow-record r1
create flow-exporter ex1
create flow-exporter ex2
commit-buffer

# Configuring a Flow Monitor Session
# Note: (Receive, Transmit added and noted)

scope eth-flow-mon
enter flow-mon-session s1
create flow-monitor m1r receive
up
create flow-monitor m1t transmit
commit-buffer
# Configuring NetFlow Cache Active and Inactive Timeout:
# This is the minimum that will config

scope eth-flow-mon
scope flow-timeout default
set cache-timeout-active 60
set cache-timeout-inactive 15
commit-buffer
# Associating a Flow Monitor Session to a vNIC:

Scope org /
scope service-profile sp1
Scope vnic eth0
enter flow-mon-src s1
commit-buffer
# and after all that…
cisco-ucspe# Scope org /
cisco-ucspe /org # scope service-profile sp1
cisco-ucspe /org/service-profile # Scope vnic eth0
cisco-ucspe /org/service-profile/vnic # enter flow-mon-src s1
cisco-ucspe /org/service-profile/vnic/flow-mon-src* # commit-buffer
Error: Update failed: [The adapter with vnic org-root/ls-sp1/ether-eth0 does not support netflow]

What connecting NetFlow to a Service Profile Template/vNIC template looks like

Cisco UCSM NetFlow Attach to Serice Profile Template / vNIC Template
Cisco UCSM NetFlow Attach to Serice Profile Template / vNIC Template
Published inarticlesNetFlowTip of the dayUCS

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *