VCF Operations for Networks does not show flows when IPFIX for vCenter vDS

Products

• VCF Operations for Networks

Issue/Introduction

In VMware Cloud Foundation 9.x, VCF Operations for Networks does not show flow data after enabling NetFlow/IPFIX for vCenter Distributed Virtual Switches and distributed port groups.

• The Flows dashboard does not populate.
• Active Flows and All Flows remain at zero.
• Application Discovery does not show expected VM/application flow data.
• The vCenter Distributed Virtual Switch shows NetFlow/IPFIX settings configured.
• VCF Operations for Networks also shows Network & Flow collection enabled on the vCenter data source.

This can occur when IPFIX is configured directly in vCenter on the VDS/DVPGs while also being enabled through VCF Operations for Networks.

Environment

VMware Cloud Foundation 9.x

VCF Operations for Networks / Network Operations

Cause

The issue occurs due to conflicting or inconsistent IPFIX configuration ownership.

In VCF 9.x, VDS/DVPG IPFIX flow collection should be enabled and managed through the VCF Operations for Networks vCenter data source workflow. If IPFIX is manually configured directly in vCenter on the Distributed Virtual Switch or distributed port groups, and then also enabled through VCF Operations for Networks, the configuration can become inconsistent and prevent flow data from being processed correctly.

VCF Operations for Networks is expected to push and manage the IPFIX configuration after Network & Flow Collection is enabled on the vCenter data source.

Resolution

Remove the existing IPFIX configuration from both VCF Operations for Networks and vCenter, then re-enable IPFIX only through VCF Operations for Networks.

1. In VCF Operations for Networks, edit the affected vCenter data source.
2. Disable Network & Flow Collection / NetFlow IPFIX for the vCenter data source and save the configuration.
3. In vCenter, remove any manually configured NetFlow/IPFIX settings from the affected Distributed Virtual Switch and distributed port groups.
4. Return to VCF Operations for Networks.
5. Edit the vCenter data source.
6. Enable Activate Network and Flow Collection.
7. Select the appropriate collector appliance.
8. Enable NetFlow (IPFIX) on this vCenter.
9. Save the vCenter data source configuration.
10. Generate traffic between workloads connected to the eligible distributed port groups.
11. Confirm that the Flows dashboard begins populating in VCF Operations for Networks.

Additional Information

Workflow connection fails to activate or enable from cloud proxy

Enable IPFIX Configuration on VDS and DVPG