Cisco NetFlow on IOS

[Mike Riforgiate]

Commands to enable NetFlow on Cisco IOS

• enable
• configure terminal
• ip flow-export destination 2055
• ip flow-export source    (e.g. use a Loopback interface or routable interface to WitFoo appliance)
• ip flow-export version 9  (if version 9 does not take, use version 5)
• ip flow-cache timeout active 1
• ip flow-cache timeout inactive 15
• snmp-server ifindex persist

 

• Enable NetFlow on each layer-3 interface you are interested in monitoring traffic for: interface ip flow ingress
• exit
• write memory

Wait at least 10 minutes then on the WitFoo Search interface, run a search on an IP address that should have been monitored by the NetFlow exporter. It should show up in the communications tab.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book.html

[Author]

Posts