Configuration verification - NetFlow issues

Hi everyone,

I come here for help because I'm quite lost.

I'm actually configuring NetFlow on my organization network. I use NetFlow Traffic Analyzer as collector and got 30 routers.

I want to monitor WAN interfaces (one hot and one backup) per router :

ip flow ingress<br />ip route-cache flow

Routers are configured with ingress command only (I read that egress command is not relevant many times) :

ip flow-cache timeout active 1<br />ip flow-cache timeout inactive 15<br />ip flow-export destination 172.XX.XXX.XXX 2055<br />ip flow-export source Loopback0<br />ip flow-export version 5<br />snmp-server community XXXXXX RO

During my testing phase, everything works fine. I bought SolarWinds and installed it on a new server (Windows Server 2012 R2). Since then, I don't receive any egress data.

Is someone experiencing issues like this or having skills to help me ? Thanks !

Find more posts tagged with

netflow cisco

ingress_egress_traffic

Accepted answers

All comments

donthomas

Can you apply only the "ip flow ingress" command on all the interfaces of the router (even the LAN though you are not monitoring it) and check. You do not need both "ip flow ingress" and "ip route-cache flow" on the interfaces - it can lead to traffic double count.

kemmlli

Hi,

I think I will enable ingress & egress on all WAN interfaces. I don't want to monitor LAN interfaces right now.

I did not understand the difference between monitoring with ingress on all interfaces (LAN & WAN) and monitor with ingress & egress (WAN interfaces only).

So, if they still are people who don't get it, remember these two ways.

Thank you donthomas !

donthomas

Yes - enabling ingress and egress on all the WAN interfaces will work perfectly, provided that is the only interface from each router you would monitor.

You can find the explanation on ingress and egress here:

Netflow design