Configure NetFlow on a Cisco Router

First, log in to the router and enter enable mode (en), then start configuring from the terminal : conf t Enable Cisco Express Forwarding, required by most recent IOS versions for NetFlow to work: ip cef Set the source address of the generated NetFlow exports. You can use any interface with a fixed IP address: ip flow-export source FastEthernet0/0 Set up a read-only SNMP community. If you use something other than public you need to add it to UltraView in <settings> <managed devices> <snmp>: snmp-server community public Set the NetFlow timeouts so flows are exported in close to real time: ip flow-cache active timeout 1; ip flow-cache inactive timeout 15 Set the NetFlow version. Some very old IOS releases may not support version 9; in that case use version 5. ip flow-export version 9; switches export version 7 Enable NetFlow for inbound traffic on every routed interface. You should also set the bandwidth (in kbps) in both directions for WAN interfaces. Older IOS releases may not support ip flow ingress; in that case use ip route-cache flow:int FastEthernet0/0 ip flow ingress; exit int Dialer0; ip flow ingress; bandwidth 1000; bandwidth receive 8000;exit Alternatively, you can enable NetFlow for traffic in both directions on a single interface: int Dialer0; ip flow ingress; ip flow egress; bandwidth 1000; bandwidth receive 8000;exit Set the destination for the generated NetFlow exports. This is the address of the UltraView server and one of the ports it is configured to receive NetFlow on. Port 2055 is configured by default: ip flow-export destination a.b.c.d 2055 Finally, exit configure mode (exit), and don't forget to save the configuration to non-volatile memory (wr mem).

NetFlow on Cisco Catalyst Switches

Copy and Paste these links into your browser window if they are not active Configure NetFlow on a Cisco Catalyst 6500 series switch running native IOS http://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configurenetflow-on-a-cisco-catalyst-switch-runnin.html

Configure NetFlow on a Cisco Catalyst 6500 series switch running CAT OS http://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configurenetflow-data-export-on-a-cisco-catalyst-s.html
Configure NetFlow on a Cisco Catalyst 4000 and 4500 series switch http://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configurenetflow-on-a-cisco-catalyst-4000-or-4500.html

Enter SNMP Community strings and UDP Ports

<settings> <managed devices>

Add an SNMP Device

Enter IP Address

Select add a device and enter device IP address; hit enter twice to add more devices or click add a device again

Manage interfaces

Manage interfaces

GUI Features

Drag your mouse across a chart

Swoop your mouse in a chart

Examine this interface

Examine this interface results:

Select an application for a range of options

Hover your mouse over an application to isolate it on the chart

Left click application to get more detail

Click to see everyone using this application Name the application straight from the GUI

Search for an IP address

Search for an address or domain, always at the top right corner

Search Results: see the traffic rates and all sessions for that IP address

Security Dashboard

Set email or syslog alerts

<Settings> <Alerts>

1st Step: Add e-mail server or syslog target

Set up time frames for individual alerts

Example: Bandwidth Utilization Alert

Begin setting up your alert

Customize your alert triggers

Example: Application Alert Trigger

Alerts will be forwarded to email and syslog targets and be seen on the overview dashboard and in views in UltraView

Select and Filter a view

First select this icon
Edit/Filter a view

Remove view from dashboard

Begin Editing a View

Change the Time Span

Edit by interface, application, IP address, server address, and client address

Build Custom Dashboards

Select <Copy to a new dashboard> from all views and dashboards to enable customization

When you are in the dashboard edit mode you can save all your edits!

Apply and save filters

Add and edit views to your custom dashboard

Re-size and move views in the edit mode

Two Views side by side; all nine views can be added to a dashboard

Administrator can add users and create groups in UltraView

Administrator creates groups and decides what levels of restrictions to apply

After creating a group, administrator begins to build a custom dashboard for Joe User

Administrator created a custom dashboard for Joe User group

Joe User signs in

Joe User signs into a static read only dashboard that still has the ability to update data