Network Hierarchy Cflowd

Configure global cflowd (NetFlow) settings for the SD-WAN network hierarchy. This controls flow export parameters and collector destinations for network traffic visibility.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
network_hierarchy	Class	network_hierarchy	No

network_hierarchy (sdwan)

Name	Type	Constraint	Mandatory	Default Value
collectors	Class	collectors	No

collectors (sdwan.network_hierarchy)

Name	Type	Constraint	Mandatory	Default Value
cflowd	Class	cflowd	No

cflowd (sdwan.network_hierarchy.collectors)

Name	Type	Constraint	Mandatory	Default Value
servers	List	servers	No
settings	Class	settings	No

servers (sdwan.network_hierarchy.collectors.cflowd)

Name	Type	Constraint	Mandatory	Default Value
address	Any	IP or IP	Yes
bfd_metrics_export	Boolean	true, false	No	false
export_interval	Integer	min: 1, max: 86400	No	600
export_spread	Boolean	true, false	No	false
udp_port	Integer	min: 1024, max: 65535	No	4739
vpn_id	Integer	min: 0, max: 65530	Yes

settings (sdwan.network_hierarchy.collectors.cflowd)

Name	Type	Constraint	Mandatory	Default Value
collect_dscp_output	Boolean	true, false	No	false
collect_tloc_loopback	Boolean	true, false	No	false
collect_tos	Boolean	true, false	No	false
flow_active_timeout	Integer	min: 30, max: 3600	No	600
flow_inactive_timeout	Integer	min: 1, max: 3600	No	60
flow_refresh_time	Integer	min: 60, max: 86400	No	600
flow_sampling_interval	Integer	min: 1, max: 65536	No	1
protocol	Choice	ipv4, ipv6, both	No	ipv4

Examples

Example-1: Basic cflowd with a single server. This example configures cflowd with default timeouts and a single server in VPN 1 and protocol is set to IPv4.

sdwan:
  network_hierarchy:
    collectors:
      cflowd:
        servers:
          - vpn_id: 1
            address: 10.0.0.1
            udp_port: 4739
        settings:
          flow_active_timeout: 600
          flow_inactive_timeout: 60
          protocol: ipv4

Example-2: Full cflowd configuration with BFD metrics. This example enables all collection options including TOS, remarked DSCP, and TLOC loopback. Two collectors are configured — the first with BFD metrics export enabled.

sdwan:
  network_hierarchy:
    collectors:
      cflowd:
        servers:
          - vpn_id: 1
            address: 10.0.0.1
            udp_port: 4739
            export_spread: true
            bfd_metrics_export: true
            export_interval: 300
          - vpn_id: 2
            address: 10.0.0.2
            udp_port: 9995
        settings:
          flow_active_timeout: 300
          flow_inactive_timeout: 30
          flow_refresh_time: 300
          flow_sampling_interval: 10
          collect_tloc_loopback: true
          protocol: both
          collect_tos: true
          collect_dscp_output: true

Note: Upto 4 cflowd collector servers can be configured