Netflow from C9300L

[eroche]

Looking at the documentation for the C9300L it says it can do NetFlow while in Meraki mode. I have it setup but not seeing any data getting to our SolarWinds server. Thoughts?

Thanks

[RWelch]

NetFlow Overview documentation has a troubleshooting section, if interested.

Note on SolarWinds NTA

SolarWinds NTA ignores NetFlow packets that do not contain either an SNMP ingress or egress interface index. The MX supports export of an SNMP ingress or egress interface index via NetFlow.

[GIdenJoe]

Have you done a show run in the cloud CLI to see how the exporter is setup?

[Tony-Sydney-AU]

Hi @eroche ,

According to this Cisco document, you can check it with the following command:

Switch# show snmp mib ifmib ifindex
GigabitEthernet1/0/39: Ifindex = 47
unrouted VLAN 20: Ifindex = 200
unrouted VLAN 23: Ifindex = 230
GigabitEthernet1/0/28: Ifindex = 36
GigabitEthernet1/0/19: Ifindex = 27

Hope this helps you with your SolarWinds solution.

[eroche]

Good Morning

Thanks for the replies....these are being managed by Meraki Cloud so there is no CLI to check unfortunately. I believe the normal Meraki switch need to have their NetFlow sent to a public IP and I also  believe it says it on the config page but the Cisco page doesn't say anything about where the traffic needs to come from. Am I correct in saying that?

Thanks in advance

[Tony-Sydney-AU]

Good day! 

C9300 series running in "Meraki Mode" (CS 17.x.y.z firmware family) behave just as a regular MS family switch with regards to Netflow.

Our MS Netflow document explains you can basically configure the Collector IP and port , which in your case is your Solarwinds NTA service IP and port.

Now, to your point, I agree that the Cisco page doesn't say anything about where the traffic needs to come from; however, Netflow analysis doesn't send traffic back to the devices. Instead, netflow server consumes and process that data and then generates usage graphs and reports.

@eroche , are you trying to find which IP address belongs to Meraki Cloud so that you can identify them in a netflow usage report?

Looking forward to your input on this.