Using Netflow v9 in a Active/Active cluster

rkra — Fri, 26 Sep 2014 13:40:42 GMT

I configured a Netflow profile and associated it with a "Untrust" Interface on my active Machine in my setup.

I was surprised seeing that the second Active machine got this assotiation too. So I accume both machines are sending to the same receiver and to the same port.

I'm new to Netflow and my question is: How does the receiver distinguish which data is coming from which server?

Both IFs are sending to UDP 2055.

Do I have to send each Flow to a different port on the Flow-Receiver?

Roman

Re: Using Netflow v9 in a Active/Active cluster

hshah — Fri, 26 Sep 2014 14:40:52 GMT

Hi RKRa,

In Active/Active set up both box remains active. One is Active-Primary and other is Active-Secondary. Data Interface for bot boxes processes traffic.

Hence if anything is configured on those interfaces its active for both the devices.

However, Newflow source traffic should be different for both the box. I think you can distinguish based on source IP.

Regards,

Hardik SHah

topic Re: Using Netflow v9 in a Active/Active cluster in General Topics

Using Netflow v9 in a Active/Active cluster

Re: Using Netflow v9 in a Active/Active cluster