Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA 4.2.2 Administrator Guide > Device configuration examples > NetFlow device examples > Cisco NetFlow configuration

Cisco NetFlow configuration

Table of contents
No headers
Created by Caroline Juszczak, last modified by Alexandra.Nerpasova on Oct 26, 2016

Views: 220 Votes: 1 Revisions: 4

The port used for NetFlow traffic is specified in the configuration of your flow‑enabled Cisco appliance. The following excerpts from a Cisco router configuration file offer an example of where to look to enable NetFlow traffic on a Cisco router:

!
interface GigabitEthernet0/1
description link to PIX
ip address 10.3.1.2 255.255.255.252
ip route-cache flow
!
ip flow-export source GigabitEthernet0/1
ip flow-export version 5
ip flow-export destination 1.2.0.12 2055
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
snmp-server ifindex persist
!

The ip flow-export destination value must reflect the IP address of your NPM server. This value also contains the port number (2055) that is required in this step. The ip route-cache flow, ip flow export source, and ip flow-export version values are required to enable NetFlow traffic.

SolarWinds NetFlow Traffic Analyzer supports NetFlow version 5 and version 9. For more information about NetFlow version 5 or 9, see your Cisco router documentation or the Cisco website at www.cisco.com. For more information on enabling NetFlow traffic on Cisco switches, see Enabling NetFlow and NetFlow Data Export on Cisco Catalyst Switches or your Cisco documentation.

 
Last modified
03:05, 26 Oct 2016

Tags

Classifications

Public