Cflowd Definition

Cflowd monitors traffic flowing through Cisco IOS XE SD-WAN devices in the overlay network and exports flow information to a collector.

A Cflowd policy defines a configuration template used to define settings and parameters for collecting flow data from network traffic. A data policy that defines traffic match parameters and that includes the action "cflowd" is required to effectively export flow information based on the parameters defined by the Cflowd template.

Diagram

Classes

data_policy (sdwan.centralized_policies.definitions)

Name	Type	Constraint	Mandatory	Default Value
cflowd	List	[cflowd]	No

cflowd (sdwan.centralized_policies.definitions.data_policy)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[A-Za-z0-9\-_]{1,127}$	Yes
description	String		Yes
active_flow_timeout	Integer	min: 30, max: 3600	Yes
inactive_flow_timeout	Integer	min: 1, max: 3600	Yes
sampling_interval	Integer	min: 1, max: 65536	Yes
flow_refresh	Integer	min: 60, max: 86400	Yes
protocol	Choice	ipv4, ipv6, both	Yes
tos	Boolean	true, false	Yes
remarked_dscp	Boolean	true, false	Yes
collectors	List	[collectors]	Yes

collectors (sdwan.centralized_policies.definitions.data_policy.cflowd)

Name	Type	Constraint	Mandatory	Default Value
vpn	Integer	min: 0, max: 65527	Yes
ip_address	IP		Yes
port	Integer	min: 1024, max: 65535	Yes
transport	Choice	transport_tcp, transport_udp	Yes
source_interface	String		Yes
export_spreading	Choice	enable, disable	Yes

Examples

sdwan:
  centralized_policies:
    definitions:
      data_policy:
        cflowd:
          - name: CFLOW_DEFINITION_TEST2
            description: CFLOW_DEFINITION_TEST2
            active_flow_timeout: 30
            inactive_flow_timeout: 3600
            sampling_interval: 30
            flow_refresh: 60
            protocol: ipv4
            tos: true
            remarked_dscp: true
            collectors:
              - vpn: 112
                ip_address: 173.36.118.129
                port: 2048
                transport: transport_udp
                source_interface: GigabitEthernet0
                export_spreading: enable
              - vpn: 101
                ip_address: 173.36.118.130
                port: 2048
                transport: transport_udp
                source_interface: GigabitEthernet1
                export_spreading: enable