Table Of Contents
Prerequisites for Netflow v9 for IPv6
Information About Netflow v9 for IPv6
NetFlow Export Format Version 9
How to Configure Netflow v9 for IPv6
Configuration Examples for Configuring Netflow v9 for IPv6
Configuring the NetFlow v9 for IPv6 Feature: Example
Feature Information for Netflow v9 for IPv6
Netflow v9 for IPv6
First Published: February 27th, 2007Last Updated: February 27th, 2007This module contains information about and instructions for configuring NetFlow and NetFlow Data Export (NDE) for capturing and exporting data from IP version 6 (IPv6) traffic flows using the NetFlow version 9 (v9) export format.
Finding Feature Information in This Module
Your Cisco IOS software release may not support all of the features documented in this module. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the "Feature Information for Netflow v9 for IPv6" section.
Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Contents
•Prerequisites for Netflow v9 for IPv6
•Information About Netflow v9 for IPv6
•How to Configure Netflow v9 for IPv6
•Configuration Examples for Configuring Netflow v9 for IPv6
•Feature Information for Netflow v9 for IPv6
Prerequisites for Netflow v9 for IPv6
Your router must be running Cisco IOS release 12.2(33)SRB or later to configure the Netflow v9 for IPv6 feature.
Information About Netflow v9 for IPv6
Before you configure the Netflow v9 for IPv6 feature, you should understand the following concepts:
•NetFlow Export Format Version 9
NetFlow and NDE on the PFC
The NetFlow cache on the PFC captures statistics for flows routed in hardware.
The PFC uses one of these flow masks to create NetFlow entries:
•source-only—The cache contains one entry for each source IP address. All flows from a given source IP address use this entry.
•destination—The cache contains one entry for each destination IP address. All flows to a given destination IP address use this entry.
•destination-source—The cache contains one entry for each source and destination IP address pair. All flows between the same source and destination IP addresses use this entry.
•destination-source-interface—Adds the source VLAN SNMP ifIndex to the information in the destination-source flow mask.
•full—A separate cache entry is created for each IP flow. A full entry includes the source IP address, destination IP address, protocol, and protocol interfaces.
•full-interface—Adds the source VLAN SNMP ifIndex to the information in the full flow mask.
See the "Configuring NetFlow and NDE" chapter of the Cisco 7600 Series Cisco IOS Software Configuration Guide, Release 12.2SR, for detailed information on NetFlow flow masks and flow records.
NetFlow Export Format Version 9
For all NetFlow export versions, the NetFlow export datagram consists of a header and a sequence of flow records. The header contains information such as sequence number, record count, and system uptime. The flow record contains flow information, such as IP addresses, ports, and routing information.
NetFlow version 9 export format is the newest NetFlow export format. The distinguishing feature of the NetFlow version 9 export format is that it is template based. Templates make the record format extensible. NetFlow version 9 export format allows future enhancements to NetFlow without requiring concurrent changes to the basic flow-record format.
The NetFlow version 9 export record format is different from the traditional NetFlow fixed format export record. In NetFlow version 9, a template describes the NetFlow data, and the flow set contains the actual data. This arrangement allows for flexible export.
The use of templates with the NetFlow version 9 export format provides several other key benefits:
•You can export almost any information from a router or switch, including Layer 2 through 7 information, routing information, IP version 6 (IPv6), IP version 4 (IPv4), multicast, and Multiprotocol Label Switching (MPLS) information. This new information allows new applications for export data and new views of network behavior.
•Third-party business partners who produce applications that provide NetFlow collector or display services for NetFlow are not required to recompile their applications each time a new NetFlow export field is added. Instead, they can use an external data file that documents the known template formats.
•New features can be added to NetFlow more quickly, without breaking current implementations.
•NetFlow is "future-proofed" against new or developing protocols, because the version 9 export format can be adapted to provide support for them and for other non-NetFlow-based approaches to data collection.
The NetFlow version 9 export packet header format is shown in Table 1.
Figure 1 shows a typical example of exporting data using the NetFlow version 9 export format.
Figure 1 NetFlow Version 9 Export Format Packet Example
Additional information about the NetFlow export format version 9 and the export format architecture is available in the NetFlow version 9 Flow-Record Format document.
How to Configure Netflow v9 for IPv6
Perform the steps in this required task to configure the Netflow v9 for IPv6 feature.
SUMMARY STEPS
1. enable
2. configure terminal
3. ipv6 unicast-routing
4. mls flow {ip | ipv6} {destination | destination-source | full | interface-destination-source | interface-full | source}
5. mls nde sender
6. ip flow-export version 9
7. ip flow-export destination {ip-address | hostname} udp-port
8. interface type number
9. ipv6 address ip-address/mask
DETAILED STEPS
Examples
The following output of the show mls nde command verifies that NDE is enabled on the router.
Cisco-7600#show mls nde
NetFlow Data Export enabled
Exporting flows to 10.30.30.2 (12345) 172.16.10.2 (88)
Exporting flows from 10.4.9.149 (58970)
Version: 9
Layer2 flow creation is disabled
Layer2 flow export is disabled
Include Filter not configured
Exclude Filter not configured
Total NetFlow Data Export Packets are:
0 packets, 0 no packets, 0 records
Total NetFlow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 0
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_OUTPUT_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
NetFlow Aggregation Disabled
Configuration Examples for Configuring Netflow v9 for IPv6
This section contains the following configuration example:
•Configuring the NetFlow v9 for IPv6 Feature: Example
Configuring the NetFlow v9 for IPv6 Feature: Example
The following example shows how to configure the router for NetFlow and NDE for IPv6 traffic using NetFlow export format version 9.
ipv6 unicast-routing
mls flow ipv6 interface-full
mls nde sender
ip flow-export version 9
ip flow-export destination 172.16.10.2 88
interface FastEthernet1/1
ipv6 address
2001:0DB8::1/64Additional References
The following sections provide references related to the Netflow v9 for IPv6 feature.
Related Documents
Related Topic Document TitlePlatform-independent NetFlow commands, complete command syntax, command mode, defaults, command history, usage guidelines, and examples.
Command reference for Cisco 7600 series routers
Cisco 7600 Series Cisco IOS Command Reference, Release12.2SR
Standards
MIBs
RFCs
Technical Assistance
Command Reference
This feature uses no new or modified commands.
Feature Information for Netflow v9 for IPv6
Table 2 lists the release history for this feature.
Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.
Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Note Table 2 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2007 Cisco Systems, Inc. All rights reserved.