NetFlow Support for VXLAN-Encapsulated Packets

For VXLAN tunneled flows, the VNI is exported using the LAYER_2_SEGMENT_ID field (field 351). This field consists of ENCAPTYPE_VXLAN (1) in the upper byte, and the VNI in the lower 3 bytes. The exported L2, L3, and L4 fields for VXLAN flows are from the inner header only. If the switch does not have VXLAN tunnels configured, NetFLow exports the VNI and information for the inner header for any “through” flows. The VXLAN export flow functionality is active by default; no configuration is required.