Cisco Systems



Netflow


Netflow

NetFlow is a protocol used to collect metadata on IP traffic flows traversing a network device.

Developed by Cisco Systems, NetFlow is used to record metadata about IP traffic flows traversing a network device such as a router, switch, or host.

A NetFlow-enabled device generates metadata at the interface level and sends flow data information to a flow collector, where the flow records are stored to enable network traffic analytics and management. A network operator can use NetFlow data to determine network throughput, packet loss, and traffic congestion at a specific interface level. NetFlow data also supports other network-level monitoring use cases such as DDoS detection and BGP peering.

PRTG is a NetFlow collector

Netflow Configuration

In configuration mode issue the following to enable NetFlow Export:

ip flow-export destination netflow_collector_IP_address Port
ip flow-export source interface
ip flow-export version 9 → (if version 9 does not take, use version 5)
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
snmp-server ifindex persist

Ports 2055 Enable NetFlow on each layer-3 interface you are interested in monitoring traffic for:
interface
ip flow ingress

Example
ip flow-export destination 10.100.110.69 2055
ip flow-export destination 10.100.110.69 9996

Validate configuration:
LAB-R1# show ip cache flow

LAB-R1# show ip flow export

LAB-R1# show ip flow interface

LAB-R1# show ip flow export template


Eninam BAGNABANA     |         |     bagnadavid@outlook.fr     |