How to configure Netsight as IPfix collector?

[Michael_Eisensc]

Hello everyone,

I have a question concearning IPfix configuration on theNetsight. I'm currently working for a customer, who is using Netsight(ver. 7.0.6.27) to collect Netflow Traffic from Enterasys Switches, but is now planning to use Extremes Summit x460-G2 switcheswith out-of-band management. Since these switches can not use Netflow I decidedto configure IPfix instead. According to the following GTAC-Article Netsight should beable to handle IPfix:

https://extremeportal.force.com/ExtrArticleDetail?an=000082706

After I have configured the switch I noticed that there isno flow traffic displayed in OneView (Analytics>Flows). With the "show port ipfix" command I verified,that flow data is actually collected on the Switch. On the Netsight I checked with the netstat- andtcpdump-command that udp port 2075 is open and that the Netsight receives theIPfix traffic from the switch.

Since this seems to be okay I think that I either have toconfigure Netsight as an IPfix collector or that I have to adjust thedashboard.

Can someone please help?



This would be my switches ipfix configuration:

#

# Module ipfix configuration.

#

enable ip-fix

configure ip-fix domain 1

configure ip-fix ip-address 10.233.23.250 protocol udpL4-port 2075 vr "VR-Mgmt"

configure ip-fix source ip-address 10.233.26.14 vr"VR-Mgmt"

configure ip-fix ports 1-47 ingress-and-egress

enable ip-fix ports 1-47 all_traffic

Thanks in advance.

Kind regards,

Michael Eisenschmid

[Michael_Eisensc]

Hello Bill,

as suggested I tried changing the VR to VR-Default. Sadly it did not help.

After entering the command "tcpdump -i eth0 s0 port 2075" on the Netsight I noticed that i dont recieve packets anymore.

So I think that VR-Mgmt was correct.

Kind regards,

Michael

[Antonio_Opromol]

Hi Bill, in case the ExtremeManagement server do the role of netflow collector, I suppose it will have a flow cache (as the engine) for the real-time traffic, but regarding the netflow database for the long time store? Will ExtremeManagement use it's mysql db for this or is not implemented?

[Michael_Eisensc]

Hi,

Thank you all for your fast replies.
Sadly my customer does not own a purview at the moment.

@Bill:
Actually the management port is configured to the netsight. The IP-address of the Switch is configured on the management VLAN for out-of-band Management. So i think the "vr-mgmt" statement should be correct?

The switches IP-address appears in the Netsight under Analytics>Flows as server but not as flow source.

I will be at the customers site on Tuesday and will check the netflow collector settings then.

Kind regards
Michael

[Bill_Stritzinge]

Here is the prior post for your convienience... https://community.extremenetworks.com/extreme/topics/summit-x460-g2-and-purview-it-is-possible