ExtremeAnalytics Support with Enhanced IPFIX Records

ExtremeWireless leverages and integrates with ExtremeAnalytics for decoding, detection, collection of Metadata, and scrutinization of Layer 7 data. The solution functions by first enabling WLANs on the wireless controller to forward packets to the ExtremeAnalytics engine. This feature requires ExtremeAnalytics 7.0.8 or later.

Depending on your topology, the controller and the AP can inspect the flow, generate the application ID and round trip time (RTT), and format the IPFIX record. With B@AP, the AP sends the IPFIX record to the controller via a WASSP tunnel and then the controller exports the record to ExtremeAnalytics. With B@AC, the controller exports the IPFIX record to ExtremeAnalytics directly.

The IPFIX packets provide all the standard information found in a Netflow v9 packet with enhanced IPFIX parameters. The standard packet includes source and destination IP addresses, ports, protocol, and packet counter information. The enhanced IPFIX records include the application group ID, display ID, round trip times (RTT), and flow meta data (which is part of the URL to help classify the flow). The enhanced IPFIX records that the controller sends releases the dedicated MirrorN port and reduces ExtremeAnalytics CPU resources previously used to identify the application.

IPFIX record templates are supported for IPv4 and IPv6.

Upgrades retain NETFLOW configuration, delivering enhanced records. Netflow with IPFIX reporting is disabled by default.