Before you can view meaningful sFlow reports, you must configure sFlow-enabled devices, such as routers or switches, to communicate network activity back to the Flow Monitor listener application. There are two methods to configure sFlow to send data to Network Traffic Analysis:
The following examples shows how to configure sFlow devices to send data to Network Traffic Analysis.
To configure a sFlow enabled device to send sFlow data to Flow Monitor using the command line interface (CLI):
The following example uses CLI configuration to enable sFlow on an HP ProCurve 3500 series switch. It should also work for 2610-PWR, 3500 yl, 5400, and 8200 series. The configuration is for Flow Monitor running on a system with an example IP address 192.168.3.1
and receiving sFlow data on UDP port 9999.
Before you proceed! This procedure includes steps you or your HP administrator perform outside of WhatsUp Gold. Progress is not responsible for changes to documentation, online resources, and hosted software that originate from HP or other third-party vendors. The documentation that follows was accurate at the time of this Network Traffic Analysis release.
ssh
198.51.100.1
(sign-on with Telnet or SSH)
HP Switch>
enable
(Enter privileged mode)
HP Switch#
config
Syntax/Example |
Description |
Set the sFlow destination and collector instance:
Example:
|
—Where "1" is the sFlow instance number. Unless you have more than one collectors from this switch, "1" should be a good value. —And where the example sFlow target (NTA collector) device address here is |
Set the sFlow sample rate for each interface:
Example:
|
—Where —Where One out of every 128 packets will be collected in this example. |
Set the polling interval:
Example:
|
This example shows how to poll every 30 seconds. |
Check for sampling and polling data:
|
An sFlow table displays. |
The following example uses SNMP commands to enable sFlow on an HP ProCurve 2610 series switch. We recommend configuring the sFlow device via the device OS commands from the command line interface (CLI); however, some sFlow devices do not include this capability. In this case, you can use SNMP commands to configure sFlow. This configuration example is for Flow Monitor running on a system with IP address 192.168.3.1 and receiving sFlow data on UDP port 9999.
To configure an sFlow device, using SNMP commands, to send sFlow data to Flow Monitor:
Important: This procedure is an example that applies to an HP ProCurve 2610 switch and should not be used for other devices. The process for configuring a device to export sFlow data varies widely from device to device and is dependent upon your network configuration. Refer to the documentation to determine the correct process for your device.
Important: An sFlow device configured with the SNMP commands typically do not save the configuration to memory. If the device is rebooted, or power is lost, all sFlow configuration is lost and must be manually reset using the SNMP commands. Make sure that you save the SNMP configuration commands for future device configuration.
Note: Make sure that the sFlow device is configured to allow SNMP read/write access and make sure that you have the community string information for read/write access. Refer to the documentation to determine the correct process for your device.
Command |
Purpose |
|
Sets the sFlow receiving device address. In this example, the IP address (192.168.3.1) must be provided as a hexadecimal value (C0A8031F). For example: Important: The example IP address must be entered as a hexadecimal value. Use an IP to hexadecimal calculator to determine the hexadecimal value for your sFlow collector's IP address. This example IP address breaks down into a hex value as follows: |
|
Sets the sFlow receiving device port address. The default Flow Monitor port is 9999. For example: |
|
Sets the sFlow receiver owner. The -D is a TYPE-STR identifier that specifies a Display String value. This value can be any string, for example NFmonitor (referring to Flow Monitor application which will receive the sFlow data). The -i is a TYPE-STR identifier that specifies an Integer value. The 100,000,000 value is a timeout value that defines the timeout countdown starting point value (in milliseconds). For example: |
Note: Repeat the following settings for each interface on the sFlow device you want to monitor. The last number in the MIB OID represents the interface number. |
|
|
Sets the sFlow sample rate. One out of every 128 packets will be collected in this example. For example: |
|
Enables sFlow on the device. 1 enables / 0 disables sFlow. For example: |
|
Sets the sFlow polling interval. Polls every 30 seconds in this example. For example: |
|
Enables sFlow polling. 1 enables / 0 disables sFlow polling. For example: |