Cisco Catalyst 9300 Configuration

This document provides configuration steps for setting up MOTADATA_NETFLOW on the Cisco Catalyst 9300 series switches. Follow the steps below to configure flow records, exporters, and monitors.

Create flow records for input and output:

flow record MFERecordinput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface input
match ipv4 tos
match flow direction
collect interface output
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last

flow record MFERecordoutput
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface output
match ipv4 tos
match flow direction
collect interface input
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last

Create a flow exporter:

flow exporter MFEExporter
destination {MOTADATA_NETFLOW_SERVER_IP}
source {LOOPBACK_INTERFACE_NAME}
transport udp {MOTADATA_NETFLOW_SERVER_LISTENER_PORT}
template data timeout 60

Create flow monitors for input and output:

flow monitor MFEMonitorinput
exporter MFEExporter
record MFERecordinput
cache timeout active 60

flow monitor MFEMonitoroutput
exporter MFEExporter
record MFERecordoutput
cache timeout active 60

Enable flow monitoring on interfaces. Enter global configuration mode on the router or MSFC, and issue the following commands for each interface you want to enable flow:

interface {INTERFACE_NAME}
ip flow monitor MFEMonitorinput input
ip flow monitor MFEMonitoroutput output

After completing the configuration, navigate to Menu > Flow Explorer and select Explorer to view the active flow data.