Configuring Cisco 3850 and 3925

     

    Please use the following commands to configure Cisco 3850 and Cisco Router 3925:

    flow record NFA1

    match ipv4 tos

    match ipv4 protocol

    match ipv4 source address

    match ipv4 destination address

    match transport source-port

    match transport destination-port

    match interface input

    collect interface output

    collect counter bytes long

    collect counter packets long

    collect timestamp absolute first

    collect timestamp absolute last

     

     

     

    flow record NFAout

    match ipv4 tos

    match ipv4 protocol

    match ipv4 source address

    match ipv4 destination address

    match transport source-port

    match transport destination-port

    match interface output

    collect interface input

    collect counter bytes long

    collect counter packets long

    collect timestamp absolute first

    collect timestamp absolute last

     

     

     

    flow exporter NFA

    destination {server ip address}

    transport udp 9996

    template data timeout 60

    !

    !

     

     

     

    flow monitor NFA1

    exporter NFA

    cache timeout active 60

    record NFA1

    !

    !

     

     

     

    flow monitor NFAout

    exporter NFA

    cache timeout active 60

    record NFAout

     

     

     

    Apply the below command in all the interfaces of the device:

    ip flow monitor NFA1 input

     

    ip flow monitor NFAout output

     

    For example:

    interface GigabitEthernet1/1/1

    ip flow monitor NFA1 input

    ip flow monitor NFAout output