Submit a ticketCall us

WebinarUpcoming Webinar: How Help Desk and Remote Support Pays for Itself

Learn how help desk software can simplify ticketing management, allow you to track hardware and software assets, and accelerate the speed of IT support and service delivery. Gain insights on how remote support tools allow your IT team to maximize their efficiency and ticket resolution by expediting desktop troubleshooting, ultimately helping keep end-users happy and productive.

Register here.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Configure traditional NetFlow v5 on a Cisco router - Video

Configure traditional NetFlow v5 on a Cisco router - Video

Updated June 15, 2018

Overview

This video (4:33)  shows you how to configure a Cisco® router to export NetFlow data using traditional NetFlow, NetFlow v5 or v9. This demo does not cover Flexible NetFlow.  

 

 

This video is available in the following languages:  English

Environment

  • NTA

Related Resources

Video Transcription

This video shows you how to configure a Cisco® router to export NetFlow data using traditional NetFlow, NetFlow v5 or v9. This demo does not cover Flexible NetFlow.  

NetFlow helps you determine traffic source and destination, traffic type and bandwidth issues on your network.

First, open a command prompt or any other telnet or SSH tool such as PuTTY and log into your router. For this demonstration, we will be using a router with the IP address 10.199.2.6 and we'll be exporting the flows to our SolarWinds® NetFlow analyzer collector.

You must be in privilege mode to configure your router.

If you see Router> when you log in, you are in user mode.

To switch, enter enable to change to privilege mode.

Enter your enable password when prompted.

Once in enable mode, go into configuration mode by typing config t which stands for Configure Terminal.

Press enter.

Now you are ready to start the NetFlow configuration.

Start by typing ip flow-export source GigabitEthernet0/0. This tells the router to use this interface as the source to export the flow data.

This must be a Layer 3 interface. When flows are exported, the IP address that is configured on the interface will be used. The interface used as a source for export does not have to be one that is enabled to collect NetFlow data.

Next, tell the router where to send the NetFlow data: ip flow-export destination 10.199.25.62 2055.

This is the IP Address where the router will export the flows and the UDP port number. UDP Port 2055 is the default listening port for SolarWinds® NetFlow Traffic Analyzer.

Now, configure the NetFlow version by typing ip flow-export version 5. SolarWinds also supports version 9.

If you are using NetFlow version 9 set the template timeout to one minute. Enter ip flow-export template timeout-rate 1. This will ensure there are no data gaps if the server or the NetFlow service restarts.

Type ip flow-cache timeout active 1. The default setting for long active flows, also known as long-lived flows, is 30 minutes. This can cause high peaks well above the configured circuit speeds. By breaking the cached flows into one-minute fragments you can normalize the data and avoid these high peaks.

To ensure that finished flows are periodically exported, configure the inactive timeout by typing ip flow-cache timeout inactive 15. This exports all inactive flows every 15 seconds.

Next, type snmp-server ifindex persist. This ensures that the ifIndex values persist during device reboots.

This next step enables NetFlow on interfaces where NetFlow data will be collected and analyzed.

In this example, both gigabitEthernet 0/0 and port-channel1 will be enabled to collect NetFlow.

Type int gigabitEthernet 0/0 and press enter.

Type ip flow ingress and press enter.

Type exit to leave the configuration mode for this interface.

Type int port-channel1 and press enter.

Type ip flow ingress and press enter.

Type exit to leave the configuration mode for this interface.

In order to avoid duplicate flows, follow this rule of thumb:

  • When monitoring only one interface on the device, configure both ip flow ingress and ip flow egress.
  • And when monitoring multiple interfaces, configure ip flow ingress only.

The final step is to exit configuration mode. Type exit and wr mem to save the configuration to the router.

Now that the Cisco router is configured, you can analyze your network traffic using SolarWinds®NetFlow Traffic Analyzer and monitor your network using SolarWinds® Network Performance Monitor.

 

 

Last modified

Tags

Classifications

Public