Posted on February 22, 2021 11:26 pm
 |  Asked by Michael Johnson
 |  339 views
0
0
Print Friendly, PDF & Email

Hi,

We are trying to configure IPFIX on our campus switch (CCS 720XP) running EOS 4.25.1F and want to utilize the IPFIX Hardware Export capability to send flows for tracking to CloudVision Portal running version CVP2020.2.3 but we are not able to have any active flows being formed to be exported. We tried running with flow tracking sampled (for IPFIX) and we got see the active flows populated by looking at show flow tracking sampled flow-table command but no display on CVP – Traffic Flows tab. Am I missing something?

 

Below is the configuration (for Hardware-based export) for what we expect:

flow tracking hardware
tracker ftr1
record export on interval 3000
!
exporter exp1
collector <cvp-ip-address>
local interface loopback0
template interval 5000
record format ipfix standard timestamps counters
no shutdown
!

int Ethernet1
flow tracker hardware ftr1
no shutdown
!

720XP-IDF#show flow tracking hardware
Flow Tracking Status
Type: Hardware
Running: yes
Standard record format for counters: yes
Standard record format for timestamps: yes
Tracker: ftr1
Active interval: 3000ms
Inactive timeout: 10000ms
Groups: IPv4, IPv6, VxlanIPv4, VxlanIPv6
Exporter: exp1
VRF: default
Local interface: Loopback0 (1.2.3.4)
Export format: IPFIX version 10, MTU 9152
DSCP: 0
Template interval: 5000ms
Collectors:
x.x.x.x port 4739
Active interfaces:
Et1,52

 

 

0
Posted by Tamas Plugor
Answered on February 22, 2021 11:31 pm

Hi Michael,

The collector IP has to be 127.0.0.1, as TerminAttr on EOS is doing the collector part, which then streams the data to ingest on CVP.

HTH,

Tamas

0
0
Posted by Michael Johnson
Answered on March 8, 2021 10:44 pm

Thanks, Tamas. We made the recommended changes in our configuration to include 127.0.0.1 as our collector. IP-Routing was enabled however, we are still unable to see IPFIX flows exported to our CloudVision. Note when we try with sFlow, the flows appear in CloudVision.

Please let me know if you need additional [show] output or if there is any recommended debugging required for us to determine what the issue could be.

 

0
Posted by Tamas Plugor
Answered on March 23, 2021 5:01 pm

Hi Michael,

If you haven't already found the answer, could you please open a TAC case by sending an email to support@arista.com and one of use would be more than happy to help, might be easier to tshoot this live.

Thanks,

Tamas

Post your Answer

You must be logged in to post an answer.