Netflow on a Cisco ASR1002-X for Orion

I ran into an issue with configuring Netflow on a Cisco ASR1002-X. I was getting an error when I went to apply the configuration.

This is the configuration I was going to use:

flow record NETFLOW
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect counter bytes
collect counter packets

flow exporter NETFLOW-to-ORION
destination 172.16.100.60
source GigabitEthernet0/0/3
transport udp 2055
export-protocol netflow-v5

flow monitor NETFLOW-MONITOR
description Original Netflow captures
record NETFLOW
exporter NETFLOW-to-ORION
cache timeout inact 10
cache timeout act 5

interface GigabitEthernet0/0/1
ip flow monitor NETFLOW-MONITOR input

This is the error I got:

br01-a(config-if)#ip flow monitor NETFLOW-MONITOR input
Warning: Exporter NETFLOW-to-ORION could not be activated because: Invalid arguments provided

It turned out that the router did not like “export-protocol netflow-v5“. This is a problem because the server we are running only runs v5 and not v9. This is the configuration that worked:

flow exporter NETFLOW-to-ORION
 destination 172.16.100.60
 transport udp 2055
 export-protocol netflow-v5

flow monitor NETFLOW-MONITOR
 exporter NETFLOW-to-ORION
 record netflow ipv4 original-input

interface GigabitEthernet0/0/3
 ip flow monitor NETFLOW-MONITOR input
More Stories
Palo Alto Save Config and Import Into Another Firewall Device