Configuring NetFlow for Aruba

Before you proceed! This procedure includes steps you or your Aruba administrator perform outside of WhatsUp Gold. Progress is not responsible for changes to documentation, online resources, and hosted software that originate from Aruba or other third-party vendors. The documentation that follows was accurate at the time of this Network Traffic Analysis release.

From the controller WebUI

Task 1: Enable Flow (IPFIX) with Aruba Defaults (You will Need to Configure to Point at NTA)

Important: The IPFIX tab only displays if IPFIX is already enabled at the device locally. For details, consult the Aruba documentation.

1. From the Managed Device, select Configuration > Services choose External Services.
2. Click IPFIX
3. Select Enabled from the Enable IPFIX list and click Submit.
4. Click Pending Changes.
5. In the Pending Changes window, select the check box and then click Deploy changes.

Task 2: Assign WhatsUp Gold NTA as the Collector

1. In the Collector IP Address field, enter the IP address for the WhatsUp Gold host.
2. From the Transport Mode drop down list, select UDP.
3. In the Collector Port field, enter destination port number for Network Traffic Analysis (NTA listens to port 9999 by default)

Task 3: Assign Flow Volume and Frequency

Unless you are running them to use a dedicated management network, flow packets can add overhead to network bandwidth. These example settings show how you can determine the size and volume of Flow summaries.

• For Flow cache, define the maximum number of entries cached at the device.

  For example: 1000

• For Upload interval (all), define the time interval for uploading summaries for an active session.

  For example: 60

• For Upload interval (inactive), define the time interval for uploading summaries for an inactive session.

  For example: 15

• For Upload interval template, define how often this exporter will send its template definition to NTA, so NTA knows which fields to expect.

  For example: 60

Task 4: Identify the Flow with an Administrative Domain

Give the NTA source (observation point) a label that is meaningful when you generate reports, apply thresholds, view statistics on NOC boards, and more.

For Observation Domain, provide a unique string the describes the traffic or group of clients that connect to the device.

For example:

"3rd Floor Building B"

Finally: Deploy Your Changes

1. From the Managed Device, select Configuration > Services choose External Services.
2. Click IPFIX
3. Select Enabled from the Enable IPFIX list and click Submit.
4. Click Pending Changes.
5. In the Pending Changes window, select the check box and then click Deploy changes.

From the CLI

(host) [md] (config)#ip-flow-export-profile

(host) [md] (ip flow collector profile)# enable

(host) [md] (ip flow collector profile)# wireless-export

(host) [md] (ip flow collector profile)# collector-ip <collector ip address>

(host) [md] (ip flow collector profile)# transport-protocol udp

(host) [md] (ip flow collector profile)# port 9999 (note: this is the default for NTA)

(host) [md](ip flow collector profile)# flow-cache-size 1000

(host) [md](ip flow collector profile)# upload-all-interval 60

(host) [md](ip flow collector profile)# upload-inactive-interval 15

(host) [md](ip flow collector profile)# upload-template-interval 60

(host) [md] (ip flow collector profile)# observation-domain "3rd Floor Building B"

See Also Configure Flow Export on Source Devices Configure Flow Export Configure sFlow Export on HP Devices Configuring Flexible NetFlow on a Cisco Device Configuring NetFlow for Meraki