Cisco Catalyst 9500 User Manual

Bidirectional Flow Records
Flow Record 1 - Bidirectional Flow Record
Procedure
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
Device# configure terminal
Enters flow record configuration mode.flow record flow_record_name
Example:
Step 2
Device(config)# flow record fr-wdavc-1
(Optional) Creates a description for the flow
record.
description description
Example:
Step 3
Device(config-flow-record)# description
fr-wdavc-1
Specifies a match to the IP version from the
IPv4 header.
match ipv4 version
Example:
Step 4
Device(config-flow-record)# match ipv4
version
Specifies a match to the IPv4 protocol.match ipv4 protocol
Example:
Step 5
DEvice(config-flow-record)# match ipv4
protocol
Specifies a match to the application name.match application name
Step 6
Example:
This action is mandatory for
AVC support, as this allows the
flow to be matched against the
application.
Note
Device(config-flow-record)# match
application name
Specifies a match to the IPv4 address of the
client (flow initiator).
match connection client ipv4 address
Example:
Step 7
Device(config-flow-record)# match
connection client ipv4 address
Specifies a match to the IPv4 address of the
server (flow responder).
match connection server ipv4 address
Example:
Step 8
Device(config-flow-record)# match
connection server ipv4 address
Specifies a match to the transport port of the
server.
match connection server transport port
Example:
Step 9
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
129
Configuring Application Visibility and Control in a Wired Network
Bidirectional Flow Records

Cisco Catalyst 9500 Specifications

General

Software	Cisco IOS XE
Energy Efficiency	Energy Efficient Ethernet (EEE)
Warranty	Limited Lifetime Hardware Warranty
Series	Catalyst 9500
Ports	Up to 48 ports (varies by model)
Power Supply	Redundant power supplies
Operating Temperature	0°C to 40°C
Weight	Up to 35 lbs (varies by model)
Memory	16 GB DRAM, 16 GB Flash
Modularity	Modular uplinks and power supplies
Security	Cisco TrustSec, MACsec
Redundancy	Power supply redundancy
Management	CLI, SNMP, NETCONF
Latency	Sub-microsecond