Cisco Catalyst 9300-48U Configuration

This document provides a concise guide on configuring the Cisco Catalyst 9300-48U switch, focusing on flow record and flow monitor setup for network analysis.

Flow Record Configuration

Input Flow Record

flow record MFERecordinput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface input
match ipv4 tos
match flow direction
collect interface output
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last

Output Flow Record

flow record MFERecordoutput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface output
match ipv4 tos
match flow direction
collect interface input
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last

Flow Exporter Configuration

flow exporter MFEExporter
destination {MOTADATA_NETFLOW_SERVER_IP}
source {LOOPBACK_INTERFACE_NAME}
transport udp {MOTADATA_NETFLOW_SERVER_LISTENER_PORT}
template data timeout 60

Flow Monitor Configuration

Input Flow Monitor

flow monitor MFEMonitorinput
exporter MFEExporter
record MFERecordinput
cache timeout active 60

Output Flow Monitor

flow monitor MFEMonitoroutput
exporter MFEExporter
record MFERecordoutput
cache timeout active 60

Interface Configuration

Enter global configuration mode on the router or MSFC, and issue the following commands for each interface on which you want to enable flow:

Select interface:

interface {INTERFACE_NAME}

Enable input flow monitor:

ip flow monitor MFEMonitorinput input

Enable output flow monitor:

ip flow monitor MFEMonitoroutput output

After completing the configuration, navigate to Menu > Flow Explorer and select Explorer to view the active flow data.