IPFix

[Shamyy]

Hello community ,

need your kind support to know how IPFix works , in which ip range i should assign to collector ip ,which UDP port and how to check it ?

Thanks,

shamy

[lhoffer · Accepted solution]

In order for the IPfix flow data to be of any use, you'll need a separate application to collect/parse/render the flow details.  Some examples of those apps are vRealize Network Insight, NTop, Flow-Tools, etc.  Whatever IP address you associate with the collector server for those applications is what you'd specify as the collector IP for the vDS to export their flow data to.  By default, most will use UDP port 2055 for IPfix but as you've observed it's configurable as some collectors could use different ports.

[Shamyy]

thanks ihoffer,

this application should be connected on VDS or it can be on outside network ?

or you mean it is virtual appliance i should deploy on ESXI and assign to port group on VDS ?

Thanks,

shamy

[lhoffer]

The flow collector can be on an outside network and does not need to be part of the vDS(s) that it's ingesting flows from.  Flow data will be sourced from the management vmk ports on the hosts where the monitored flows are to/from so the collector just needs to be reachable from there.