Configure IPFIX monitoring for NSX Distributed Virtual port groups, and vSphere Distributed Virtual port groups that are connected to a VDS switch enabled to support NSX-T networking.

From vSphere, enable IPFIX for Distributed Virtual port groups (vSphere) and from NSX Manager, enable IPFIX for segments (NSX-T) created on a VDS switch.

To enable IPFIX monitoring for Distributed Virtual port groups, see the vSphere Networking documentation.

To enable IPFIX monitoring for NSX-T port groups, see Add a Switch IPFIX Profile.

A VDS switch enabled for NSX-T displays the following behavior:
  • Both non-uplink and uplink ports support bidirectional traffic incoming and outgoing on:
    • Ports, port groups, VMs on vSphere.
    • Segments, segment ports, and groups on NSX-T
  • IPFIX profile samples packets on uplink ports when are coming from or going to non-uplink ports that are IPFIX enabled. For example, consider that VM-A and VM-B are connected to non-uplink ports (port-1, port-2), where port-1 connected to VM-A is IPFIX enabled, and port-2 connected to VM-B is not IPFIX enabled. When you send traffic from VM-A and VM-B traffic to port-1, only packets from VM-A are sampled because IPFIX is enabled only on the port that VM-A is connected to. IPFIX does not sample packets coming from the port-2 associated to VM-B because IPFIX is not enabled on that port.

  • Packet count exported to the IPFIX collector is the total count based on a sampling rate, not the sampled packets. For example, IPFIX calculates the count of total packets and exports the info. For 100 incoming packets, IPFIX might sample 9–11 packets. It exports 90 or 110 packets to the IPFIX collector.