Submit a ticketCall us

Bridging the ITSM Divide
Integrated help desk and remote support software for faster resolution

Join us on Wednesday, November 29, 2017 at 11 a.m. CT, as we discuss the benefits of effectively integrating your help desk software with remote support solutions to help increase the efficiency of IT administration, improve communication, and decrease mean time to resolution (MTTR) for IT issues of all sizes. This directly impacts end-user satisfaction and your business’ bottom line. Register Now.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Enable NetFlow export on a Cisco model 2610 router

Enable NetFlow export on a Cisco model 2610 router

Table of contents
No headers

The following example shows how to enable NetFlow export on a Cisco model 2610 router. The source of the export is interface number 0/1. The destination command sends the NetFlow data to the Orion server over port 2055.

For detailed information on configuring NetFlow on Cisco devices, search for an appropriate configuration guide on the Cisco website.

  1. Log in to the network device.
  2. Enable NetFlow export on the device using proper commands. The following example enables NetFlow on a Cisco device:
    ip flow-export source <GigabitEthernet><0/1>
    ip flow-export version 5
    ip flow-export destination <Orion_Server_IP_address> 2055
    ip flow-cache timeout active 1
    ip flow-cache timeout inactive 15
    snmp-server ifindex persist
    
  3. Add the device exporting NetFlow to SolarWinds NPM for monitoring.

  4. Verify that the device is exporting NetFlow data as expected and that the device is monitored in SolarWinds NPM.

To verify that data are exported correctly, use a packet capture tool, such as WireShark, to search for packets sent from the network device to the Orion server.

Example
If you successfully add a NetFlow enabled device with IP address 10.199.14.2 to SolarWinds NPM, and the device is actively exporting NetFlow data to the Orion server, you will see in WireShark a packet like the one (49) highlighted below in gray:

As expected, we see in the packet details that 10.199.14.2 is its source IP address and 10.110.6.113 is the destination, which is the Orion server. This correlates with the node details on the device in Orion, as highlighted in yellow.

To verify that the IP address of the exporting interface on the network device is the one being monitored in Orion:

  • Open a command line interface, log into the network device, and then type show run to see the running configuration of the device.
  • Page down to the lines where the export source interface is defined. In this case, we see ip flow-export source Ethernet0/0.

To discover the IP address for this interface, type show run int Ethernet0/0. We see that the IP address of the interface, 10.199.14.2, is being monitored by the Orion server.

5. Click My Dashboards > NetFlow > NTA Summary.

6. Under NetFlow Source, verify the NetFlow-enabled nodes listed with a recent time posted for collected flow.

 
Last modified

Tags

Classifications

Public