I ran into an issue with configuring Netflow on a Cisco ASR1002-X. I was getting an error when I went to apply the configuration.
This is the configuration I was going to use:
flow record NETFLOW match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect counter bytes collect counter packets flow exporter NETFLOW-to-ORION destination 172.16.100.60 source GigabitEthernet0/0/3 transport udp 2055 export-protocol netflow-v5 flow monitor NETFLOW-MONITOR description Original Netflow captures record NETFLOW exporter NETFLOW-to-ORION cache timeout inact 10 cache timeout act 5 interface GigabitEthernet0/0/1 ip flow monitor NETFLOW-MONITOR input
This is the error I got:
br01-a(config-if)#ip flow monitor NETFLOW-MONITOR input Warning: Exporter NETFLOW-to-ORION could not be activated because: Invalid arguments provided
It turned out that the router did not like “export-protocol netflow-v5“. This is a problem because the server we are running only runs v5 and not v9. This is the configuration that worked:
flow exporter NETFLOW-to-ORION destination 172.16.100.60 transport udp 2055 export-protocol netflow-v5 flow monitor NETFLOW-MONITOR exporter NETFLOW-to-ORION record netflow ipv4 original-input interface GigabitEthernet0/0/3 ip flow monitor NETFLOW-MONITOR input