03-01-2022 05:29 AM
We need clarification if our 3260 firewall requires an L3 interface for Netflow exports. The link below, "HOW TO VERIFY AND TROUBLESHOOT NETFLOW," states a 3200 series cannot use the mgmt interface, but I can't find any other sources that state the mgmt interface cannot be used.
Also, to confirm, do we need a separate Netflow profile for each of the L3 sub-interfaces on the 3260 (link below)?
Thank you.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UuYCAU
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzyCAC
03-01-2022 07:49 AM
A netflow profile can be assigned to multiple interfaces without any issue. The article that you linked does a poor job of communicating what it's attempting to, but you need to assign the netflow profile to any logical interface you want to receive netflow information from. The assigned netflow profile itself however can be linked to the physical interface in addition to all of the logical sub-interfaces without issue, you don't need a new netflow profile for every assigned logical interface.
Assuming that it follows the 5200 and 7000 series, the 3200 can't pass netflow interface across the MGMT interface. You need to configure a service route through a dataplane interface as mentioned in the document.
03-01-2022 07:49 AM
A netflow profile can be assigned to multiple interfaces without any issue. The article that you linked does a poor job of communicating what it's attempting to, but you need to assign the netflow profile to any logical interface you want to receive netflow information from. The assigned netflow profile itself however can be linked to the physical interface in addition to all of the logical sub-interfaces without issue, you don't need a new netflow profile for every assigned logical interface.
Assuming that it follows the 5200 and 7000 series, the 3200 can't pass netflow interface across the MGMT interface. You need to configure a service route through a dataplane interface as mentioned in the document.
03-01-2022 12:00 PM
It sounded odd to have a profile for each interface and not share the same one.
Thank you for confirming the 3200 series Netflow question.
Jeff
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
