Enabling NetFlow on an Enterasys Device | Fluke Recording Equipment

User’s Guide – version 3.1.3

NetFlow Tracker

To ensure that NetFlow Tracker receives enough information from the device you must ensure that the “Look Community String” configured in the “SNMP” page is one of those set up in SNMP Settings, and you must set “Packeteer-0 Packets” to “on” in the “system variables” page.

If you have a recent version of PacketWise, you may have extra settings on the “system variables” page that should be changed. If available, “Intermediate FDR” should be set to “on”, “Intermediate FDR Timeout “ to 30000 milliseconds, and “Reset Packeteer 1/2 counters” to “on”. If these settings are not available then the PacketShaper will describe all of the traffic for a long-lived flow in one record, and NetFlow Tracker will account for it all in the minute during which the flow ended. This will lead to large spikes in charts for the device.

Enabling NetFlow on an Enterasys Device

NetFlow Tracker supports Enterasys devices capable of exporting NetFlow version 9 exports. To enable NetFlow, enter the following commands while logged in to the router with read/write access:

set netflow cache enable

This enables NetFlow.

set netflow export-destination <address> 2055

Use the address of your NetFlow Tracker machine and one of the ports configured in the Listener Ports settings page. Port 2055 is monitored by default.

set netflow export-interval 1

This breaks up long-lived flows into one-minute segments.

set netflow port <port-string> enable

You need to enable NetFlow on each interface through which traffic you are interested in will flow. This will normally be the Ethernet and WAN interfaces.

set netflow export-version 9

This sets the export version. Version 9 is required for NetFlow Tracker to be able to associate NetFlow information with the interfaces it relates to.

80

Image 80

Fluke Recording Equipment manual Enabling NetFlow on an Enterasys Device

Contents

NetFlow Tracker Software License Agreement Grant of Licence and Payment of Fees Copyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Support Services Support ChargesUndertakings by You Supplier’s Undertakings Termination Limitation of Liability and indemnityIntellectual Property Rights Confidential Information and Security Miscellaneous Response Times Exceptions to Support ServicesSupport Hours Contents LONG-TERM Reports Appendix 2 CSV File Format What is NetFlow? What is NetFlow Tracker?Features and Benefits Introduction User’s Guide version NetFlow Tracker Installation Pre-installation ChecksMinimum System Requirements Operating System Support Installation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Set up Snmp community strings Set up web front-end securityConfigure your routers and switches Add listener ports Using NetFlow Tracker Device traffic meters Interfaces Working with Charts Changing the displayed chartChart legend Per-AS data View a standard chart as a pie chart View a standard chart as a tabular reportZooming Zooming out Working with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Session Reports Report TemplatesAddress Reports Interface Reports QoS ReportsNetwork Reports Creating Filtered Reports Traffic Identification ReportsOther Reports Report Template Sample Size Source DataStart Time End Time Out Interface In/Out InterfaceVPN Out VPN Recognised Application Identified ApplicationToS DiffServ Destination Subnet Source/Destination SubnetSource Mask Destination Mask Long-term Reports Devices and InterfacesPer-device and Per-interface Long-term Reports Filter Editor User’s Guide version NetFlow Tracker Executive Reports Report Format Parameters Report URL FormatGeneral Form Chart 00230024 0025 Number TrueFalse Heading Features Sections128 256 Time Range Parameters Hour DayWeek Mon Calendar-based advanced Day1-day2/time1-time2 HHmmApplying a time-of-day mask to the time range 110 105100 113 115 120140 125 285 300Minute Daily Filter Parameters Port/number NamePort/name Prec%20tos PrecTos Addr/mask CodeByte Security Parameters PasswordPassword Null Management Portal Access Control ParametersSecret Aclid specifies a permitted long-term report Features Performance Tuning Database Server SettingsDisk Speed Query Size Configuration Guide Snmp SettingsLicensing Listener Ports Device List Device SettingsDevice Settings Identified Applications ArchivingTraffic Classes Deleting a Device Security SettingsVPNs Management Portal Settings Report Settings Executive Reports Saved FiltersLong-term Reports Span class=repdesctextTest/span Sub-reports Nelements=5 and chartWidth=400Content User’s Guide version NetFlow Tracker DiffServ Names Hostname Resolution SettingsIP Application Names Subnet Names Database SettingsAS Names User’s Guide version NetFlow Tracker Backup Archiving Memory Settings Performance Counters Unprocessed Flowsets Interface ScansMissed Flows Missed Exports Appendix 1 Device Configuration Enabling Netflow Export on an IOS DeviceIp cef Ip flow-export destination address Ip flow-cache timeout active Ip flow-cache timeout inactiveShow ip flow export Show ip cache flow Show ip cache verbose flow Ip route-cache flow infer-fields Mls netflowMls nde sender version Mls aging long User’s Guide version NetFlow Tracker Set mls bridged-flow-statistics enable vlanlist Set mls nde enableSet system name name Set mls nde address Flow-sampler-map allflows mode random one-out-of 1 exit Enabling Flow Detail Records on a Packeteer Device Enabling NetFlow on an Enterasys Device Using sflowtool to Convert sFlow Records to NetFlow Address Tabular report CSV format Chart CSV formatAppendix 2 CSV File Format Appendix 3 Third Party Software Components