How to validate IPFIX traffic monitoring in Prisma SD-WAN?

How to validate IPFIX traffic monitoring in Prisma SD-WAN?

352
Created On 06/10/21 05:41 AM - Last Modified 02/27/26 21:13 PM


Objective


To confirm the working of IPFIX in the Prisma SD-WAN Portal.



Environment


  • Prisma SD-WAN
  • IPFIX


Procedure


  1. The steps to configure IPFIX is documented here in the following link.
  2. IPFIX is configured sequentially from left to right (Prefixes-->Templates-->Contexts-->Profiles)
  3. To check if the IPFIX is sending traffic to the collector, run a packet capture (tcpdump) on the management interface or the interface that needs to be configured.
    tcpdump controller args=" host <IPADDR>" show
  4. The following are the commands to view IPFIX config
    dump ipfix config collector-contexts
    dump ipfix config derived-exporters
    dump ipfix config filter-contexts
    dump ipfix config ipfix-overrides
    dump ipfix config prefix-filters
    dump ipfix config profiles
    dump ipfix config templates
  5. The following commands can be used to troubleshoot IPFIX issues
    inspect ipfix exporter-stats
    inspect ipfix collector-stats
    inspect ipfix app-table
    inspect ipfix wan-path-info
    inspect ipfix interface-info


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMBBCA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail