Netflow 887

[sprocket10]

We are looking at possibly using Netflow to monitor internet usage on sites.

As I have never used Netflow before, does anyone have the basic config that I can use on a router like a 887 and any details on the server end, like software etc that would be easy enough for someone to connect to, to see internet traffic usage.

[Don Jacob · Accepted solution]

I believe your device supports NetFlow v5. Here is a sample configuration:

The following is a set of commands issued on a Cisco router to enable NetFlow version 5 on the FastEthernet 0/1 interface and export to the machine 192.168.9.101 (IP Address of NetFlow Analyzer server) on port 9996 (UDP port to export NetFlow packets).

router#enable

Password:*****

router#configure terminal

887(config)#interface FastEthernet 0/1

887(config-if)#ip route-cache flow       // Execute this command on all the L3/VLAN interfaces

887(config-if)#exit

887(config)#ip flow-export destination 192.168.9.101 2055 // Use IP address of the NetFlow Analyzer server

887(config)#ip flow-export source loopback0    // Use an interface with route to your NetFlow server

887(config)#ip flow-export version 5

887(config)#ip flow-cache timeout active 1

887(config)#ip flow-cache timeout inactive 15

887(config)#snmp-server ifindex persist

887(config)#^Z

router#write

And if you need a video:

http://www.youtube.com/watch?v=KujLCfW2V8w

For NetFlow monitoring check out trial/free options from SolarWinds, ManageEngine or Plixer. All three are good. And here is the link to SolarWinds free tool:

http://www.solarwinds.com/products/freetools/real-time-bandwidth-monitor.aspx

Regards,
Don Jacob

Disclaimer: I work for SolarWinds

NOTE: Please rate and close questions if you found any of the answers helpful.