How to configure IPFIX on Aruba OS

This article explains how to configure IPFIX export on ArubaOS controllers and gateways for use with Auvik TrafficInsights.

Note: IPFIX support is available in ArubaOS 8.0.1.0 and later.

Before You Begin

Ensure the following prerequisites are met:

• The device is configured for local management.
  • If local management is not enabled, the IPFIX configuration options may not appear in the web interface.
• The date, time, and time zone are configured correctly.
• You have administrative access to the Aruba management interface.
• You know the IP address of the Auvik collector that will receive IPFIX data.
• Any firewalls between the Aruba device and the collector allow the selected UDP export port.

Important: Accurate date and time settings ensure flow records are timestamped correctly and processed properly by TrafficInsights.

Shared Collector Deployments

If you are using a shared collector and want TrafficInsights to associate flow data with the correct site, add the source IP address as a dedicated /32 network within Auvik.

For example:

192.168.1.10/32

Even if the source IP address already belongs to a larger monitored subnet, the dedicated /32 is required so TrafficInsights can correctly associate flow records with the appropriate site.

Access the Aruba Management Interface

1. Open a web browser.
2. Navigate to the IP address of the Aruba controller or gateway.
3. Log in using an administrative account.

Configure IPFIX

1. Navigate to:

   Configuration > Services > External Services

2. Select the IPFIX tab.
3. Set Enable IPFIX to Enabled.
4. In Collector IP, enter the IP address of the Auvik collector.
5. Select UDP as the transport protocol.
6. Configure the export port.

Supported TrafficInsights ports include:

• 2055
• 2056
• 4432
• 4739
• 6343
• 9995
• 9996

7. Configure the following recommended settings:

8. Click Save.

Note: Menu names and field names may vary slightly depending on the ArubaOS release.

Verify IPFIX Export

After saving the configuration:

1. Confirm the collector IP address is reachable from the Aruba device.
2. Verify the correct export port is configured.
3. Allow several minutes for flow records to begin appearing in TrafficInsights.

Flow data is not displayed immediately and may require several export intervals before traffic becomes visible.

Troubleshooting

If flow data is not appearing in Auvik:

Verify IPFIX Is Enabled

Confirm that IPFIX remains enabled in the Aruba configuration.

Verify Collector Connectivity

Ensure:

• The collector is online.
• The collector IP address is correct.
• Routing exists between the Aruba device and the collector.
• Firewalls permit outbound UDP traffic on the configured port.

Verify Time Settings

Confirm the device's:

• Date
• Time
• Time zone
• NTP synchronization

Incorrect timestamps can impact flow processing.

Shared Collector Verification

If using a shared collector, verify that the exporting source IP address has been added to Auvik as a dedicated /32 network.

Without the /32, TrafficInsights may be unable to associate the flow records with the correct site.

Additional Information

Auvik TrafficInsights supports multiple flow-export technologies, including:

• IPFIX
• NetFlow
• sFlow

ArubaOS exports flow records using IPFIX, which provides detailed traffic visibility for network analysis and reporting.