Configuring Flow Exports on HP Aruba 5400R zl2 Series Switches

For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller.

Flow exports (sFlow) can be enabled on HP Aruba 5400R zl2 series switches through SNMP or CLI.

Enabling sFlow through SNMP

Enable the sFlowEnable.bat (for Windows and .sh for Linux) script, present under Site24x7OnPremisePoller\NetworkPlus\troubleshooting directory.

Execute the script is as follows:

SFlowEnable.bat switchIp snmpPort snmpWriteCommunity collectorIP collectorPort samplingRate

Example: C:\AdventNet\ME\NetFlow\troubleshooting>sFlowEnable.bat 192.168.188.30 161 public 192.168.133.1 9996 4096

Once sFlow is enabled on the HP devices, the Site24x7 server will start to receive the packets. You need to ensure that no access control lists (ACLs) or firewalls block the NetFlow packets (on UDP 9996) and that even the software firewalls on the server are allowing the packets to reach Site24x7.

After enabling the sFlow on the HP devices, ensure the follwoing to get the accurate traffic statistics about the device:

Sampling rate: Set the sampling rate to 4096.
sFlow receiver timeout: This determines how long sFlow remains active on the exporting device. Set the sFlow Receiver Timeout to the maximum possible value, which is 2147483647 seconds. The command to be used on the HP device for setting the sFlow receiver timeout is:

setmib sFlowRcvrOwner.1 -D NetFlow Analyzer IP sFlowRcvrTimeout.1 -i 2147483647

Enabling sFlow through CLI

To configure flow exports, execute the follwoing commands:

To enable an sFlow receiver/destination, the receiver-instance number must be a 1, 2, or 3. By default, the UDP destination port number is 6343.

[no] sflow receiver-instance destination ip-address [ udp-port-num ]
 sflow receiver-instance sampling sampling rate
 sflow polling polling interval

The following command provides a configurable option for sending sFlow packets to a destination through the out-of-band management (OOBM) port on the switch. The sFlow collector collects sample packets through the OOBM port, allowing the monitoring of network traffic. Both IPv4 and IPv6 addresses are supported.

[no] sflow receiver-instance destination udp-port-numoobm