Aruba- Adding an sFlow Configuration

Overview

• If you specify an sFlow Agent or sFlow Collector IP address, both must be of the same type: IPv4 or IPv6.

• If you do not specify an sFlow Agent address but specify an sFlow Collector, then the Collector address type must be the same as the IP Address of the management interface on the switch.

• If you specify an sFlow Agent IP address, the address will be a unique IP address for the sFlow agent on a specific switch, and therefore you should not apply this sFlow configuration to multiple switches or to entire fabrics.

If you do not specify an sFlow Agent IP address, the sFlow agent will use the IP address of the management interface on the switch.

Note- Sflow support must be enabled from Aruba side.

Steps for sFlow configuration

1. Aruba Fabric Composer, select Configuration > System > sFlow.

2. Select Actions > Add. The sFlow Configuration window opens.

3. In the Name page, complete the following fields:

• Name: Enter a name for the sFlow configuration.

• Description: Enter a description of the sFlow configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Settings page, complete the following fields

• Enable sFlow: Select the check box to enable sFlow.

• Agent IP Address: Specify the IPv4 or IPv6 address of the sFlow agent on the Aruba switch.

• Collector IP Address: Enter the IP of CCE

• Collector Port Number: Enter the port number 6343.

• Polling Interval: Specify the polling interval, which is the time period between successive interface counter samples. The polling interval can be between 5 and 300 seconds, with a default value of 20 seconds.

• Sampling Rate: Specify the sampling rate, which specifies the ratio of packets observed at the data source to the samples generated. The sampling rate can be between 1 and 1,000,000. The default is 20,000 (one sample packet every 20,000 packets).

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the previous page.

7. In the Fabrics and Switches page, complete the following fields:

• Fabrics: Select the fabric that will use this sFlow configuration. To remove a fabric, click the X next to the fabric name. When you select a fabric, all of the switches within the fabric are automatically selected. If you later add a switch to a fabric, the configuration settings are automatically applied to the new switch.

• Switches: When you select a fabric, all switches on that fabric are automatically selected to use this sFlow configuration. If this sFlow configuration is NOT used on ALL switches in the selected fabric(s), in this drop-down list, select the switch(es) that will use this sFlow configuration. If ALL switches use this sFlow configuration, ignore this field; do not select any switches. To remove a selected switch, click the X next to the switch name. An sFlow configuration applied to a specific switch takes precedence over an sFlow configuration applied to the fabric where the switch resides. If you delete an sFlow configuration that had been applied to a specific switch, the switch will begin using the sFlow configuration applied to the fabric where the switch resides, if any.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the previous page.

9. On the Summary page, check the fields for accuracy. If you need to change anything, click Back and make changes as needed.

10. Click Apply to apply the sFlow configuration or Cancel to exit without saving.

Ref. link: https://www.arubanetworks.com/techdocs/Aruba_Fabric_Composer/Content/afc60olh/sfl.htm configuration in Aruba

Verification:

Run the below command on CCE or check status on seceon GUI.

sudo tcpdump -i any port 6343 and host <device_ip>