For Release 3.0(2), NetFlow monitoring is supported for end-host mode
NetFlow is a standard
network protocol for collecting IP traffic data. NetFlow enables you to define
a flow in terms of unidirectional IP packets that share certain
characteristics. All packets that match the flow definition are then collected
and exported to one or more external NetFlow collectors where they can be
further aggregated, analyzed and used for application specific processing.
Cisco UCS Manager uses NetFlow-capable adapters (Cisco UCS VIC 1240,
Cisco UCS VIC 1280, and
Cisco UCS VIC 1225) to communicate with the routers and switches that collect
and export flow information.
A flow is a set of
unidirectional IP packets that have common properties such as, the source or
destination of the traffic, routing information, or the protocol used. Flows
are collected when they match the definitions in the flow record definition.
A flow record
definition contains all information about the properties used to define the
flow, which can include both characteristic properties or measured properties.
Characteristic properties, also called flow keys, are the properties that
define the flow.
Cisco UCS Manager supports IPv4, IPv6, and Layer 2 keys. Measured characteristics,
also called flow values or nonkeys, are values that you can measure, such as
the number of bytes contained in all packets of the flow, or the total number
A flow record
definition is a specific combination of flow keys and flow values. You can use
the following type of flow record definitions:
Flow Exporter Profiles, and Flow Collectors
transfer the flows to the flow connector based on the information in a flow
exporter profile. The flow exporter profile contains the networking properties
used to export NetFlow packets. The networking properties include a VLAN, the
source IP address, and the subnet mask for each fabric interconnect.
Cisco UCS Manager GUI, the networking properties are defined in an exporter
interface that is included in the profile. In the
Cisco UCS Manager CLI, the properties are defined in the profile.
receive the flows from the flow exporter. Each flow collector contains an IP
address, port, external gateway IP, and VLAN that defines where the flows are
and Flow Monitor Sessions
A flow monitor
consists of a flow definition, one or two flow exporters, and a timeout policy.
You can use a flow monitor to specify which flow information you want to
gather, and where you want to collect it from. Each flow monitor operates in
either the egress or ingress direction.
A flow monitor
session contains up to four flow monitors: two flow monitors in the ingress
direction and two flow monitors in the egress direction. A flow monitor session
can also be associated with a vNIC.