rajib
04-29-2009, 08:08 AM
The new Flow Analysis feature in Traverse 5.0 relies on NetFlow data exported by a router. Use the following procedure to enable and configure NetFlow on a Cisco router so that the data is exported to the flow collector running on Traverse DGE.
a. Telnet/SSH into the router; enter enable mode
b. Enable Cisco Express Forwarding:
router(config)# ip cef
c. Enable NetFlow on each physical interface:
router(config)# interface <interface>
router(config-if)# ip route-cache flow
Since NetFlow is enabled on a per-interface basis (for devices running IOS) by default done on an ingress basis, issue the commands for all interfaces where traffic is seen for accurate in/out traffic analysis.
d. Enable export of these flows with the global commands
router(config)# ip flow-export version 5
router(config)# ip flow-export destination <dge_address> 2055
router(config)# ip flow-export source FastEthernet0
router(config)# ip flow-cache timeout active 1
router(config)# ip flow-cache timeout inactive 15
The 'ip flow-export source' can be any interface that is not shutdown/down. So a stable or Loopback interface is preferred.
e. Save the configuration
router(config)# end
router# write mem
a. Telnet/SSH into the router; enter enable mode
b. Enable Cisco Express Forwarding:
router(config)# ip cef
c. Enable NetFlow on each physical interface:
router(config)# interface <interface>
router(config-if)# ip route-cache flow
Since NetFlow is enabled on a per-interface basis (for devices running IOS) by default done on an ingress basis, issue the commands for all interfaces where traffic is seen for accurate in/out traffic analysis.
d. Enable export of these flows with the global commands
router(config)# ip flow-export version 5
router(config)# ip flow-export destination <dge_address> 2055
router(config)# ip flow-export source FastEthernet0
router(config)# ip flow-cache timeout active 1
router(config)# ip flow-cache timeout inactive 15
The 'ip flow-export source' can be any interface that is not shutdown/down. So a stable or Loopback interface is preferred.
e. Save the configuration
router(config)# end
router# write mem