Configuration Mode Commands : SteelHead Configuration Commands : Data Flow Support Commands : ip flow-export destination
  
ip flow-export destination
Configures data flow support. Data flow support enables you to collect traffic flow data.
Syntax
[no] ip flow-export destination <collector-ip> <collector-port> [export-port {aux | primary}] | [filter-ip] | [netmask <netmask> | port <port>] | [filter-enable] | [template refresh-rate <packets>] | [template-timeout-rate <minutes>] | [version <version>] |interface {<interface> | capture [all | optimized | passthrough] | lan-addrs [off | on]}
Parameters
<collector-ip> <collector-port>
Specifies the export IP address and port the data flow collector is listening on. The default value is 2055.
export-port {aux | primary}
Specifies the interface used to send data flow packets to the collector.
filter ip <ip-address> <cr> | netmask <netmask> | port <port>
Specifies the IP address for filter rules. Optionally, you can configure the netmask or port.
filter-enable
Enables filters on the specified collector.
interface {<interface> | capture all | optimized | passthrough
Specifies the interface used to capture packets. The data flow collector records sent from the SteelHead appear to be sent from the IP address of the selected interface.
Optionally, specify capture to configure the type of traffic to capture
capture [all | optimized | passthrough]
Specifies the type of traffic to capture:
Specifies the traffic type to export to the flow collector. Select one of the following types:
•  all - Exports both optimized and non-optimized traffic.
•  optimized - Exports optimized traffic.
•  optimized - Exports optimized LAN or WAN traffic when WCCP is enabled.
lan-addrs {off | on}
Specifies whether the TCP IP addresses and ports reported for optimized flows should contain the original client and server IP addresses and not those of the SteelHead: off displays the SteelHead information; on displays the LAN address information.
The default is to display the IP addresses of the original client and server without the IP address of the SteelHeads.
Note: This option is not applicable to collector v9.
template refresh-rate <packets>
Specifies the number of packets sent after which templates are resent. Applicable only to collector v9.
template-timeout-rate <minutes>
Specifies the duration after which templates are resent. Applicable only to collector v9.
version <CascadeFlow | Cascade-comp | Netflow-v5 | Netflow-v9>
Specifies the data flow collector version:
•  CascadeFlow - Specifies Cascade 8.4 or later.
•  Cascade-comp - Specifies Cascade 8.34 or earlier.
•  Netflow-v5 - Enables ingress flow records (Collector v5).
•  Netflow-v9 - Enables ingress and egress flow records (Collector v9).
The CascadeFlow and CascadeFlow-comp options are enhanced versions of flow export to Riverbed Cascade. These versions allow automatic discovery and interface grouping for SteelHeads in the Riverbed Cascade Profiler or Cascade Gateway and support WAN and optimization reports in Cascade. For details, see the Cascade Profiler User Manual and the Cascade Gateway User Manual.
Usage
Before you enable data flow support in your network, you should consider the following:
•  Generating data-flow data can utilize large amounts of bandwidth, especially on low bandwidth links, thereby impacting SteelHead performance.
•  You can reduce the amount of data exported by data flow collectors if you export only optimized traffic.
•  Data flow only tracks incoming packets (ingress). For collector v9 egress flows are also tracked always.
To troubleshoot your flow export settings:
•  Make sure the port configuration matches on the SteelHead and the listening port of the collector.
•  Ensure that you can reach the collector from the SteelHead (for example, ping 1.1.1.1 where 1.1.1.1 is the NetFlow collector).
•  Verify that your capture settings are on the correct interface and that traffic is flowing through it.
amnesiac (config) # ip flow-export enable
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 interface wan0_0
capture optimized
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 export-port
primary
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 lan-addrs on
amnesiac (config) # show ip flow-export
 
Prior to NetFlow v9, for virtual in-path deployments, because the traffic is arriving and leaving from the same WAN interface, when the SteelHead exports data to a NetFlow collector, all traffic has the WAN interface index. This is the correct behavior because the input interface is the same as the output interface. For NetFlow v9, LAN and WAN interfaces are reported for optimized flows.
For details, see the SteelHead Deployment Guide.
Example
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 interface lan0_0
capture all
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 export-port aux
amnesiac (config) # ip flow-export destination 10.2.2.2 2055 lan-addrs off
Product
SteelHead CX, SteelHead EX, SteelHead-v, SteelHead-c
Related Commands
show ip