Blog :: Network Operations :: Security Operations

Avaya WLAN 8100 Wireless Controller IPFIX Support

I just finished watching a video by Swasti Verma on the Avaya WLAN 8100 wireless controller IPFIX support and as a result I thought a blog on the Avaya 8100 IPFIX configuration was in order.  The configuration is pretty short, feel free to copy the commands below, edit them and paste them into your console.

The commands for configuring IPFIX on the Avaya 8100 wireless controller according to the video are as follows:

WC8180>en
WC8180#config t
Enter configuration commands, one per line. End with CNTL/Z.
WC8180(config)#ip ipfix enable
WC8180(config)#Interface fastethernet 1
WC8180(config-if)#ip ipfix enable

The above is pretty much it.  You’re probably thinking “what about the rest!”. Yah, so was I.  As a result I did some googling and found the AVAYA WLAN 8100 CLI Reference. On page 292 it outlined the missing commands.  After a bit of reading, my guess is that a more complete configuration via the CLI probably looks more like this but, I haven’t confirmed this beyond the manual:

  • WC8180>en
  • WC8180#config t
  • Enter configuration commands, one per line. End with CNTL/Z.
  • WC8180(config)#ip ipfix enable
    # the above enables IPFIX globally. May have to do this after the next step??
  • WC8180(config)#ip ipfix collector 1 10.9.8.7
    # the above configures 1 of 2 collectors (1)
    # specifies the destination IP address (10.9.8.7) of the collector
    # IMPORTANT: The IPFIX will be sent on UDP port 9995
  • WC8180(config)#ip ipfix slot 1 aging-interval 60 export-interval 10 template-refresh-interval 300 template-refresh-packets 10000
    # slot 1: (I think) binds the configuration to the 1st specified above.
    # aging-interval 60: could have something to do with maximum flow age.  I suggest 60 seconds for 1 minute interval trending
    # export-interval 10: could have something to do with flows that age out.  Cisco uses 15 seconds minimum.
    # template-refresh-interval 300: your collector will need the template before it can display the data.
    # template-refresh-packets 10000: ** See below.
  • WC8180(config)#Interface fastethernet 1
  • WC8180(config-if)#ip ipfix enable

** Template-refresh-packets
Regarding the “template-refresh-packets 10000” command above, at first I thought this had to do with sampling.  However, I’ve also seen vendors specify how frequently the templates get refreshed based on the number of packets sent.  I reached out to Swasti Verma at Avaya but, he hasn’t replied yet.

You can also export a ‘show’ command.
WC8180(config-if)#sho ip ipfix table sort-by protocol sort-order ascending display top-10
avaya-8100-IPFIX-configuration

There you have it best as I can tell.  I’m trying to confirm the above and whether or not it only supports flow sampling. The list of vendors supporting NetFlow IPFIX from a wireless controller is growing.

  • Avaya
  • Cisco
  • Dell SonicWALL
  • Xirrus

Who will be next?