Our WAN is made up primarily of 2911 and 2901 routers. We have some 2800s that are being replaced. On the whole we have MPLS circuits at 1.5 or bonded in a Multilink to 3.0. We do have some larger circuits.
We have a very simple NTA configuration on the routers.
On the serial interface we have this:
ip flow ingress
ip flow egress
We export to Orion this way:
ip flow-export source Loopback0
ip flow-export version 5
ip flow-export destination x.x.x.x 2055
We have had issues with NTA locking up. There are times when the conversation data in NTA doesn't seem to match what is on the circuit based on other tools which rely on packet information.
Is there more we should be including in the netflow configuration? Are there other commands we should use or include? Right now we don't have a very high confidence in the netflow information.
First, I'd suggest upgrading NTA to 4.x, but it will require another DB server. Second, your config is very basic, but should work fine. There are lots of postings on Thwack, (one I responded too but can't find) with other config's that you can compare too. But your config should working be fine.
If you need to use 3.11, I'd suggest opening a case with support. It should be locking up.
Thanks! That's very helpful. I'd like to move to version 9 as well. I saw a YouTube by a SW engineer on configuring netflow which was also helpful. I believe NTA3.11 only supports version 5?
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.