Cisco 3650 IOS Switch(NetFlow) Configuration

This document provides steps to configure NetFlow for Cisco 3650 IOS Switch .

Enter global configuration mode:

config t

Create a Flow Record

Create a new flow record named MFErecord:

flow record MFErecord

Match the IPv4 Type of Service (ToS) value for the flow:

match ipv4 tos

Match the IPv4 protocol (TCP/UDP/ICMP) for the flow:

match ipv4 protocol

Match the IPv4 source IP address:

match ipv4 source address

Match the IPv4 destination IP address:

match ipv4 destination address

Match the transport-layer source port:

match transport source-port

Match the transport-layer destination port:

match transport destination-port

Match the input interface where the flow was received:

match interface input

Collect the output interface where the flow was forwarded:

collect interface output

Collect the total bytes transferred for the flow (64-bit counter):

collect counter bytes long

Collect the total packets transferred for the flow (64-bit counter):

collect counter packets long

Collect the absolute timestamp when the flow was first seen:

collect timestamp absolute first

Collect the absolute timestamp when the flow was last seen:

collect timestamp absolute last

Create a flow exporter:

flow exporter MFEexporter
destination {MOTADATA_NETFLOW_SERVER_IP}
source {LOOPBACK_INTERFACE_NAME}
transport udp {MOTADATA_NETFLOW_COLLECTOR_PORT}
template data timeout 60

Create a flow monitor:

flow monitor MFEmonitor
exporter MFEexporter
record MFErecord
timeout active 60
timeout inactive 60

For each interface where you want to enable flow, enter:

interface {INTERFACE_NAME}
ip flow monitor MFEmonitor input

Please replace {MOTADATA_NETFLOW_SERVER_IP}, {LOOPBACK_INTERFACE_NAME}, {MOTADATA_NETFLOW_COLLECTOR_PORT}, and {INTERFACE_NAME} with your specific parameters.

After completing the configuration, navigate to Menu > Flow Explorer and select Explorer to view the active flow data.