Is there anyone out there who has managed to get layer2 netflow data export
working for l2 switched ipv6 traffic on a c65k? I've been beating my head
against a wall trying to get it to work and just can't seem to.
The box in question has a sup720/pfc3b and is running sxi1. The relevant
configuration is:
ipv6 unicast-routing
ip flow ingress layer2-switched vlan NNN
mls netflow interface
mls netflow usage notify 75 120
mls flow ip interface-full
mls flow ipv6 interface-full
mls nde sender
ip flow-export version 9
ip flow-export destination x.x.x.x yyyy
ip flow-aggregation cache destination-prefix
interface VlanNNN
ip address x.x.x.x y.y.y.y
ip access-group N in
ip access-group N out
no ip proxy-arp
ip flow ingress
ipv6 address zz:zz::zz/64
ipv6 enable
end
With this configuration, I can see netflow v9 records for ipv4 L2 traffic
getting exported to the collector - indicating that NDE is working, and
exporting correctly-formed v9 records. NDE on the switch also says the
right sort of stuff:
switch#sh mls nde
Netflow Data Export enabled
Exporting flows to x.x.x.x (yyyy)
Exporting flows from x.x.x.x (zzzz)
Version: 9
Layer2 flow creation is enabled on vlan 10
Layer2 flow export is enabled on vlan 10
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
1331555 packets, 0 no packets, 42469446 records
Total Netflow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 0
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_OUTPUT_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
IPWRITE_CARD_FAILED = 0
Netflow Aggregation Disabled
I'm also seeing ipv6 netflow data being collected on the switch - these
flows look ok to me.
switch#sh mls netflow ipv6 nowrap
Displaying Netflow entries in Active Supervisor EARL in module 5
DstIP SrcIP
Prot:SrcPort:DstPort Src i/f :AdjPtr Pkts Bytes
Age LastSeen Attributes
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
2001:0:CF2E:3096:C10:13FA:C555:FD0D 2001:770:100:143::2
tcp :52212 :32385 Vl10 :0x0 20 21080 12
16:30:48 L2 - Dynamic
2001:678:4::2 2001:7C8:3:2::2
udp :21131 :dns Vl10 :0x0 1 83 4
16:30:45 L2 - Dynamic
2001:500:14:6036:AD::1 2001:7C8:42:1::2
udp :62258 :dns Vl10 :0x0 1 97 6
16:30:43 L2 - Dynamic
2001:7C8:42:1::2 2001:500:14:6036:AD::1
udp :dns :62258 Vl10 :0x0 1 146 6
16:30:43 L2 - Dynamic
[...]
... indicating that the pfc is actually collecting ipv6 netflow data.
However, there are no ipv6 netflow data records appearing on the netflow
collector. I've tried both flowd and nfcapd, just in case one of them was
playing silly buggers with v6 records, but neither of them is reporting any
ipv6 data records at all, just ipv4.
The relevant documentation suggests that this should work. Also, ipv6 NDE
for L3 traffic appears to work, from what I hear of other people.
Any suggestions here?
Nick
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
