Configuring Flow Exports on Cisco 4000 Series Devices
The 4000 and 4500 series devices require a Supervisor IV or a Supervisor Engine V with a NetFlow Services daughter card(WS-F4531) and IOS version 12.1(19)EW or above to support NetFlow data exports (NDE). Or, you must have the Supervisor Engine V-10GE (the functionality is embedded in the supervisor engine).
Configure this device as for an IOS device, but skip the ip route-cache flow command on each interface. Later, issue the following command:
ip route-cache flow infer-fields
This command ensures routing information is included in the flows. You need not enter the ip route-cache flow command on each interface.
Sample device configuration
For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller.
The following is a set of commands issued on a Cisco 4000 series switch to enable NetFlow v7 and export to the machine 192.168.9.101 on port 9996 using FastEthernet 0/1 as the source interface.
switch>(enable)ip flow-export destination 192.168.9.101 9996
switch>(enable)ip flow-export version 7
switch>(enable)ip flow-export source FastEthernet 0/1
switch>(enable)ip flow-cache timeout active 1
switch>(enable)ip route-cache flow infer-fields