Submit a ticketCall us

Training Class Getting Started with SolarWinds Backup - February 28

This course offers customers an introduction to SolarWinds Backup, focusing on configuring the backup technology, taking backups, data restoration and data security. It is a great primer and will get you up to speed quickly on SolarWinds Backup.
Register for class.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Enable NetFlow export on a Cisco model 2610 router

Enable NetFlow export on a Cisco model 2610 router

Table of contents
No headers

The following example shows how to enable NetFlow export on a Cisco model 2610 router. The source of the export is interface number 0/1. The destination command sends the NetFlow data to the Orion server over port 2055.

For detailed information on configuring NetFlow on Cisco devices, search for an appropriate configuration guide on the Cisco website.

  1. Log in to the network device.
  2. Enable NetFlow export on the device using proper commands. The following example enables NetFlow on a Cisco device:
    ip flow-export source <GigabitEthernet><0/1>
    ip flow-export version 5
    ip flow-export destination <Orion_Server_IP_address> 2055
    ip flow-cache timeout active 1
    ip flow-cache timeout inactive 15
    snmp-server ifindex persist
  3. Add the device exporting NetFlow to SolarWinds NPM for monitoring.

  4. Verify that the device is exporting NetFlow data as expected and that the device is monitored in SolarWinds NPM.

To verify that data are exported correctly, use a packet capture tool, such as WireShark, to search for packets sent from the network device to the Orion server.

If you successfully add a NetFlow enabled device with IP address to SolarWinds NPM, and the device is actively exporting NetFlow data to the Orion server, you will see in WireShark a packet like the one (49) highlighted below in gray:

As expected, we see in the packet details that is its source IP address and is the destination, which is the Orion server. This correlates with the node details on the device in Orion, as highlighted in yellow.

To verify that the IP address of the exporting interface on the network device is the one being monitored in Orion:

  • Open a command line interface, log into the network device, and then type show run to see the running configuration of the device.
  • Page down to the lines where the export source interface is defined. In this case, we see ip flow-export source Ethernet0/0.

To discover the IP address for this interface, type show run int Ethernet0/0. We see that the IP address of the interface,, is being monitored by the Orion server.

5. Click My Dashboards > NetFlow > NTA Summary.

6. Under NetFlow Source, verify the NetFlow-enabled nodes listed with a recent time posted for collected flow.

Last modified