{"id":11871,"date":"2019-10-21T16:36:13","date_gmt":"2019-10-21T19:36:13","guid":{"rendered":"https:\/\/made4it.com.br\/netflow-configuration-on-cisco-routers\/"},"modified":"2023-03-09T14:53:22","modified_gmt":"2023-03-09T17:53:22","slug":"netflow-configuration-on-cisco-routers","status":"publish","type":"post","link":"https:\/\/made4it.com.br\/en\/netflow-configuration-on-cisco-routers\/","title":{"rendered":"Netflow Configuration on Cisco Routers"},"content":{"rendered":"\n

Hello<\/p>\n\n

Today we will break down how to configure your Cisco router to export Netflow. <\/p>\n\n

Here we have the Network topology and the Netflow Server information<\/p>\n\n

\"\"<\/figure>\n\n

These are the steps required to configure the Cisco ASR9k Router to export Netflow v5\/v9<\/p>\n\n

  1. Configure Flow Exporter-Map<\/li>
  2. Configuring the Sampler-Map<\/li>
  3. Configure Monitor-Map for IPv4 and IPv6<\/li>
  4. Configure the interface to enable Netflow on the interface<\/li><\/ol>\n\n

    Let’s go to the step-by-step configuration<\/p>\n\n

    1. Configure Flow Exporter-Map<\/h2>\n\n

    Configure the Flow Exporter-Map where we tell you the Netflow Server IP, port, Netflow version and other information, following the example:<\/p>\n\n

    flow exporter-map MADE4FLOW-EM  destination 192.168.210.47  source ge-0\/0\/0  transport udp 2055  version v9  options interface-table  template data timeout 60  options interface-table timeout 60  exit<\/pre>\n\n
    2. Configuring the Sampler-Map<\/h2>\n\n
    The sampler-map will tell the Cisco ASR9k Router the sampling values to send to the Netflow Collection Server<\/p>\n\n
    sampler-map MADE4FLOW-SM  random 1 out of 500  exit<\/pre>\n\n
    In this example we are randomly exporting 1 of 500 packages.  By using sampling you have decreased the load on your router’s CPU, conserving resources.<\/p>\n\n
    3. Configuring Monitor-Map for IPv4 and IPv6<\/h2>\n\n
    The next step is to configure the Monitor-map to determine which type of protocol we will collect and which exporter we will use.<\/p>\n\n
    For IPv4 use<\/p>\n\n
    flow monitor-map MADE4FLOW-FMM\n  record ipv4\nexport MADE4FLOW-EM\n  cache entries 800000\n  cache timeout active 60\n  cache timeout inactive 15\nexit<\/pre>\n\n
    For IPv6<\/p>\n\n
    flow monitor-map MADE4FLOW-FMM-v6\n  ipv6 record\n  export MADE4FLOW-EM\n  cache entries 800000\n  cache timeout active 60\n  cache timeout inactive 15\nexit<\/pre>\n\n
    4. Configure the interface to enable Netflow on the interface<\/h2>\n\n
    To enable your router to collect information it is necessary to enable the Flow command on all interfaces, use the following commands to enable in IPv4 and IPv6<\/p>\n\n
    Gi0\/1 interface  flow ipv4 monitor MADE4FLOW-FMM sampler MADE4FLOW-SM ingress  flow ipv6 monitor MADE4FLOW-FMM-v6 sampler MADE4FLOW-SM ingress<\/pre>\n\n
    \n\n
    All configuration used<\/h2>\n\n
    flow exporter-map MADE4FLOW-EM\ndestination 192.168.210.47\n  source ge-0\/0\/0\n  transport udp 2055\nversion v9\noptions interface-table\ntemplate data timeout 60\noptions interface-table timeout 60\nexit<\/p>\n\n
    sampler-map MADE4FLOW-SM  random 1 out of 500  exit<\/p>\n\n
    flow monitor-map MADE4FLOW-FMM\n  record ipv4\nexport MADE4FLOW-EM\n  cache entries 800000\n  cache timeout active 60\n  cache timeout inactive 15\nexit<\/p>\n\n
    flow monitor-map MADE4FLOW-FMM-v6\n  ipv6 record\n  export MADE4FLOW-EM\n  cache entries 800000\n  cache timeout active 60\n  cache timeout inactive 15<\/p>\n\n
    Gi0\/1 interface\n  flow ipv4 monitor MADE4FLOW-FMM sampler MADE4FLOW-SM ingress\n  flow ipv6 monitor MADE4FLOW-FMM-v6 sampler MADE4FLOW-SM ingress<\/p>\n\n
    \n\n
    Netflow on Cisco ASR100x (1002, 1006, 1008)<\/h2>\n\n
    If your router is a Cisco ASR100x (1002, 1006, 1008), use the commands below:<\/p>\n\n
    flow exporter MADE4FLOW\n  destination 192.168.210.47\n  transport udp 2055\n  source tenGigabitEthernet 0\/3\/0\n!\nflow monitor MADE4FLOW_monitor\n  exporter MADE4FLOW\n  cache timeout active 60\n  record netflow-original\n!\nsampler 1of500\n  description sampler from 1 to 500\n  mode random 1 out-of 500<\/pre>\n\n
    On each interface of your Router run the following commandip flow monitor MADE4FLOW_monitor sampler 1of500 input<\/pre>\n\n
    \n\n
    Below is the total configuration for the Cisco ASR100x Line (1002, 1006, 1008)<\/p>\n\n
    flow exporter MADE4FLOW  destination 192.168.210.47  transport udp 2055  source tenGigabitEthernet 0\/3\/0  !  flow monitor MADE4FLOW_monitor  exporter MADE4FLOW  cache timeout active 60  record netflow-original  !  sampler 1of500  description sampler from 1 to 500  mode random 1 out-of 500<\/p>\n\n
    ON EACH INTERFACE ADD THE COMMAND\nip flow monitor MADE4FLOW_monitor sampler 1of500 input<\/p>\n\n
    \n\n
    If you have any questions, feel free to contact us via WhatsApp, email or phoneWhatsApp: +55 43 9 8485-4013<\/a>E-mail: suporte@made4flow.com.brPhone: +55 43 3047-8300Until next time<\/p>\n","protected":false},"excerpt":{"rendered":"
    Learn how to configure Netflow on your Cisco ASR9k or Cisco 100x Line (1002,1004 or 1008) router<\/p>\n","protected":false},"author":13,"featured_media":8476,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"postBodyCss":"","postBodyMargin":[],"postBodyPadding":[],"postBodyBackground":{"backgroundType":"classic","gradient":""},"footnotes":""},"categories":[320,327,531],"tags":[613,614,615,616,617,618,619,362,330,621,622,620,623,624,332,333],"class_list":["post-11871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bgp-en","category-netflow-en","category-routers","tag-cisco-en","tag-cisco-ask-9000-en","tag-cisco-asr1002-en","tag-cisco-asr1006-en","tag-cisco-asr1008-en","tag-cisco-asr100x-en","tag-cisco-asr9k-en","tag-made4flow-en","tag-netflow-en","tag-netflow-configuration-en","tag-netflow-configuration-en-2","tag-netflow-configuration-on-cisco","tag-netflow-on-cisco-en","tag-netflow-on-cisco-en-2","tag-netflow-v5-en","tag-netflow-v9-en"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/11871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/comments?post=11871"}],"version-history":[{"count":0,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/11871\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media\/8476"}],"wp:attachment":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media?parent=11871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/categories?post=11871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/tags?post=11871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}