I have a core switch (backbone) of our network that broadcasts all the vlans to other switches. I am trying to configure netflow on the switch and link it up to a Netflow sensor on PRTG.
I followed this implementation: https://www.nazaudy.com/index.php/12-technology/cisco/34-enable-netflow-v9-in-cisco-switches-with-prtg
For some reason when i do show flow export statistics, shows '0" as if nothing is getting exported!
This is my stacked core switch type: C3750X, IOS Version 15.2(4)E5, License Level: ipservices, sdm: "desktop routing"
This is the configuration i am using to get the netflow on the switch, (i tried with v9 but same issue, the below is v5):
flow record PRTG-FLOW-RECORD
description Record-Network-Traffic
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
!
flow exporter PRTG-EXPORTERv5
description Export-Flow-to-PRTG
destination 10.7.7.200
source Vlan7
transport udp 9997
export-protocol netflow-v5
!
!
flow monitor PRTG-MONITOR
description Monitor-PRTG-Flow
exporter PRTG-EXPORTERv5
cache timeout active 60
record PRTG-FLOW-RECORD
!
!
sampler PRTG-SAMPLER
mode random 1 out-of 32
When i do show exporter statistics:
Flow Exporter PRTG-EXPORTERv5:
Packet send statistics (last cleared 05:45:07 ago):
Successfully sent: 0 (0 bytes)
Client send statistics:
Client: Flow Monitor PRTG-MONITOR
Records added: 0
Bytes added: 0
When i do show flow exporter:
Flow Exporter PRTG-EXPORTERv5:
Description: Export-Flow-to-PRTG
Export protocol: NetFlow Version 5
Transport Configuration:
Destination IP address: 10.7.7.200
Source IP address: 10.7.7.1
Source Interface: Vlan7
Transport Protocol: UDP
Destination Port: 9997
Source Port: 49747
DSCP: 0x0
TTL: 255
Output Features: Not Used
When i do show flow monitor:
Flow Monitor PRTG-MONITOR:
Description: Monitor-PRTG-Flow
Flow Record: PRTG-FLOW-RECORD
Flow Exporter: PRTG-EXPORTERv5
Cache:
Type: normal
Status: allocated
Size: 128 entries / 6660 bytes
Cache:
Type: normal (Platform cache)
Status: allocated
Size: Unknown
Timers:
Local Global
Inactive Timeout: 15 secs
Active Timeout: 60 secs 1800 secs
Update Timeout: 1800 secs
Synchronized Timeout: 600 secs
I am applying these two commands under the interface VLAN:
ip flow monitor PRTG-MONITOR sampler PRTG-SAMPLER input
ip flow monitor PRTG-MONITOR sampler PRTG-SAMPLER output
For some reason i get the foolowing if i apply it under a Gigabit interface:
Error: Flexible Net Flow is not supported on this interface
My PRTG server under port 9997 is open, i made sure of that! It's just not receiving any netflow data
I would appreciate any help at this level!