Create Data for FabricVUE Traffic Analyzer

Before setting up the Traffic Analyzer, you will need to set up NetFlow, which requires a GigaSMART NetFlow license, and create an IP interface with GigaVUE-FM as the endpoint. Table 1: NetFlow Records for FabricVUE Traffic Analyzer Widgets summarizes the NetFlow records needed for the FabricVUE Traffic Analyzer.

Table 1: NetFlow Records for FabricVUE Traffic Analyzer Widgets
FabricVUE Traffic Analyzer Widget	Netflow Records Needed
Top 10 Conversations	IP Source, IP Destination, Packets, Protocols
Top 10 Applications	Protocols, Source Port, Destination Port, Bytes, Packets
Top 10 Protocols	Protocols
Top 10 Endpoints	IPv4 Source Address, Bytes, Protocols
Top 10 External Interfaces (CDP/LLDP)	Interface Name Note: For this widget, CDP/LLDP needs to be enabled on the port that is receiving traffic on the node and sending CDP/LLDP.
Top 10 Visibility Fabric Interfaces	IPv4 Address, Bytes, Packets, Interface Name
Top 10 URLs	URL, IPv4 Address, Bytes, Packets
Top 10 Endpoints with Error Code 401	Bytes, Packets, IPv4 Address, HTTP Response Code
Top 10 Endpoints with Error Code 402	Bytes, Packets, IPv4 Address, HTTP Response Code
Top 10 Endpoints with Error Code 403	Bytes, Packets, IPv4 Address, HTTP Response Code

Note: You need an active NetFlow GigaSMART license enabled on the physical node to use the FabricVUE Traffic Analyzer.

Note: Bytes, Packets, Protocol, Source IP, Destination IP, Source Port, and Destination Port should always be added. These are required in most cases.

To set up the NetFlow for the Traffic Analyzer, use the following steps or you can also use Workflows to set up NetFlow. For more information about Workflows, refer to Workflows.

1Click Physical on the top navigation link.

On the Physical Nodes page, click the IP address of the node (which has NetFlow licensed) that you want to review for traffic patterns using FabricVUE Traffic Analyzer. This Overview page of the node is displayed.

Configure a GigaSMART Group. If you want to use an existing GigaSMART Group, you can go to Step 3.

The GigaSMART Group needs to be setup before creating an IP interface.

Select GigaSMART > GigaSMART Groups > GigaSMART Groups and click New to create a new GigaSMART Group.

Enter an Alias and select an engine port in the Port List field.

Click Save.

Crete an IP interface with a tool port.

Select Ports > All Ports.

Use the Quick Port Editor to configure a port as a tool port.

Select IP Interfaces > IP Interfaces and click New to setup the tool port configured in Step b as the IP interface.

Configure NetFlow.

Select GigaSMART > NetFlow / IPFiX Generation, and then do the following:

Configure the NetFlow Exporter.

When you configure the NetFlow Exporter, make sure to do the following:

•

Set the Destination IP to the address of the GigaVUE-FM IP that will receive the data.

•

Set the Transport Protocol to UDP.

•

Set the Destination Port to 2055.

Configure the NetFlow Record.

The minimum Key Field (Match) to select are as follows:

•

Select IPv4 and enable Protocol, Source Address, and Destination Address.

•

Select Transport and enable Source Port and Destination Port.

The minimum Non-Key Fields (Collect) to select are as follows:

•

Select Counter and enable Bytes and Packets.

•

Select IPv4 and enable Protocol, Source Address, and Destination Address.

•

Select Transport and enable Source Port and Destination Port.

Configure the NetFlow Monitor.

Add the NetFlow monitor to the GigaSMART Group configured in Step 2.

Configure a GigaSMART Operation with NetFlow using the GigaSMART Group from Step 3.

Select GigaSMART Operations > GigaSMART Operations, and then click New.

For GigaSMART Groups, select the GigaSMART Group from Step 2.

For the GigaSMART Operations, select and enable NetFlow.

Select Maps > Maps > Maps.

Create a By Rule map from a single or multiple network ports to the (GigaVUE-FM) IP interface.

Return to GigaVUE-FM and select Traffic Analyzer in the Navigation pane.

You can view the traffic patterns.