![\"\"](\"https:\/\/made4it.com.br\/wp-content\/uploads\/2023\/12\/1a.png\")
<\/figure>\n\nThese are the steps required to configure the Nokia SR OS router to export NetFlow v9\/v10 via IP Netstream<\/p>\n\n
1 – Configure the NTP server
Let’s go through the setup step by step:<\/p>\n\n
1.Configuring the NTP Server<\/h3>\n\n
It is important to configure an NTP server because flow data uses timestamps based on the router’s time. If the router’s time differs from that of the server, the data will not be time-stamped correctly, resulting in a discrepancy in the information.<\/p>\n\n
It is important that you configure at least 2 NTP servers and also your router’s timezone.<\/p>\n\n
system time ntp no shutdown
system time zone BRT -03
system time ntp server 200.160.7.186
system time ntp server 201.49.148.135<\/code><\/pre>\n\n2 – Configure the cflowd parameters with the NetFlow server<\/h3>\n\nsystem security source-address application cflowd 192.168.210.49
cflowd
admin-state enable
active-flow-timeout 60
inactive-flow-timeout 15
cache-size 102400
overflow 10
template-retransmit 60
sample-profile 1 sample-rate 500
collector 192.168.210.47:2055 version 9
description \"Made4Flow\"
router-instance \"Base\"
template-set basic<\/code><\/pre>\n\n3- Configure the interface to enable NetFlow<\/h3>\n\n
Finally, we need to enable NetFlow on the interfaces that will export it. To do this, use the following commands on each interface:<\/p>\n\n
cflowd-parameters sampling unicast type interface direction ingress sample-profile 1<\/code><\/pre>\n\nBelow is the complete configuration of the Router:<\/p>\n\n
system time ntp no shutdown\nsystem time zone BRT -03\nsystem time ntp server 200.160.7.186\nsystem time ntp server 201.49.148.135\n\nsystem security source-address application cflowd 192.168.210.49\n\ncflowd\nadmin-state enable\nactive-flow-timeout 60\ninactive-flow-timeout 15\ncache-size 102400\noverflow 10\ntemplate-retransmit 60\nsample-profile 1 sample-rate 500\ncollector 192.168.210.47:2055 version 9\ndescription \"Made4Flow\"\nrouter-instance \"Base\"\ntemplate-set basic<\/code><\/pre>\n\nAnd enable the following on all interfaces<\/strong>:<\/p>\n\ncflowd-parameters sampling unicast type interface direction ingress sample-profile 1<\/code><\/pre>\n\nDetailed description<\/h3>\n\n\n- active-flow-timeout (default 1800s)<\/strong> = Time interval, in seconds, for exporting active sessions; be sure to set this value the same on both the server and the router<\/li>\n\n\n\n
- inactive-flow-timeout (default 15s)<\/strong> = The time interval, in seconds, during which no packets pass through the flow before it is considered inactive.<\/li>\n\n\n\n
- cache-size (default 65536) = <\/strong> Maximum number of active flows in the flow cache table; adjust this value according to your needs and the device’s capacity.<\/li>\n\n\n\n
- overflow (default 1%) = <\/strong> Percentage of entries to be removed from the Cflowd cache when the maximum number of entries is exceeded<\/li>\n\n\n\n
- template-retransmit (default 600s)<\/strong> = Time interval for resending the flow template information<\/li>\n\n\n\n
- sample-rate (default 1000)<\/strong> = Set this value to match the collection system to prevent discrepancies in traffic calculations<\/li>\n\n\n\n
- collector<\/strong> = destination server<\/li>\n\n\n\n
- version<\/strong> = Use 9 for Netflow v9 and 10 for IPFIX\/v10<\/li>\n\n\n\n
- router-instance (default management)<\/strong> = Specifies which routing instance will be used to route traffic to the collector<\/li>\n\n\n\n
- template-set<\/strong> = specifies the template used to send data to the collector when using V9 or V10<\/li>\n<\/ul>\n\n
\n\nSome additional commands for flow analysis:<\/p>\n\n
show cflowd status
show cflowd collector
show cflowd collector detail
show cflowd interface<\/code><\/pre>\n\n