Configuring Cflowd Traffic Monitoring

Configuring Cflowd Traffic Monitoring

By using basic component of Centralized data policy, Cflowd traffic flow monitoring can be configured. By using Cflowd template option, including location of Cflowd collector and actions in data policy Cflowd monitoring can be enabled.

Cflowd Routing Policy CLI Configuration Procedure

Create the list of Network Sites to which Cflowd policy is to be applied.

Create the List of VPN, for which Cflowd policy is to be configured.

Create lists of IP prefixes

Configure Cflowd template, its parameters, collector location , flow export timers, and sampling intervals.

• By default active flow data is exported to collector every 600 sec.
• A data set for a flow to which no traffic is flowing is sent every 60 sec.

If you configure a logging action, configure how often to log packets to the syslog files:

Create a data policy instance and associate it with a list of VPNs:

Create a sequence to contain a single match–action pair:

Define match parameters for the data packets:

In the action, enable cflowd:

In the action, count or log data packets:

if a route has no match in any sequence that it is rejected and but for nonmatching prefixes to be accepted , configure default action policy

Apply the policy and the cflowd template to one or more sites in the overlay network:

Enable Cflowd Visibility on vEdge Routers

It is also possible to enable Cflowd visibility directly on vEdge router , without configuring data policy. With this option traffic monitoring can be done from all VPN to in the LAN.