Cflowd Definition

The example below shows definition of cflowd policy definition.

Diagram

Classes

data_policy (sdwan.centralized_policies.definitions)

Name	Type	Constraint	Mandatory	Default Value
cflowd	List	[cflowd]	No

cflowd (sdwan.centralized_policies.definitions.data_policy)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[A-Za-z0-9\-_]{1,127}$	Yes
description	String		Yes
active_flow_timeout	Integer	min: 30, max: 3600	No
inactive_flow_timeout	Integer	min: 1, max: 3600	No
sampling_interval	Integer	min: 1, max: 65536	No
flow_refresh	Integer	min: 60, max: 86400	No
protocol	Choice	ipv4, ipv6, both	No	ipv4
tos	Boolean	true, false	No	false
remarked_dscp	Boolean	true, false	No	false
collectors	List	[collectors]	No

collectors (sdwan.centralized_policies.definitions.data_policy.cflowd)

Name	Type	Constraint	Mandatory	Default Value
vpn	Integer	min: 0, max: 65527	Yes
ip_address	IP		Yes
port	Integer	min: 1024, max: 65535	Yes
transport	Choice	transport_tcp, transport_udp	Yes
source_interface	String		Yes
export_spreading	Choice	enable, disable	No

Examples

Example-1: In the below example , cflows policy has been defined to use timeouts for active,inactive flows in seconds.The sampling rate has been set to 30 seconds and flow refresh to 60seconds. There are two collectors defined one in each of service vpn 112 and 101 respectively.For each of the collector , IP address , port number and source_interface has been defined.

sdwan:
  centralized_policies:
    definitions:
      data_policy:
        cflowd:
          - name: CFLOW_DEFINITION_TEST2
            description: CFLOW_DEFINITION_TEST2
            active_flow_timeout: 30
            inactive_flow_timeout: 3600
            sampling_interval: 30
            flow_refresh: 60
            protocol: ipv4
            tos: true
            remarked_dscp: true
            collectors:
              - vpn: 112
                ip_address: 173.36.118.129
                port: 2048
                transport: transport_udp
                source_interface: GigabitEthernet0
                export_spreading: enable
              - vpn: 101
                ip_address: 173.36.118.130
                port: 2048
                transport: transport_udp
                source_interface: GigabitEthernet1
                export_spreading: enable