Community
Community

Find all you need to begin your THWACK journey, including documentation, missions, blogs, community groups, events, and media.
Command Central

Getting Started
MVP Program

MVP Program
Monthly Mission

THWACKcamp: The Mission
Blogs

Community Announcements

Product Blog
Groups

DevOps Discourse

Data Driven

SolarWinds Academy

See All Groups
Events

SolarWinds User Group

THWACKcamp

↪ 2024: On Demand

Bracket Battle
Media Vault

Movies & Mainframes

TechPod

THWACK Tech Tips

THWACK Livecast

SolarWinds Lab Archive

THWACKcamp Archive

See All Media
Products
Products

Find the best place to learn and ask questions about your SolarWinds products.
Observability

Observability Solutions

SolarWinds Observability

Hybrid Cloud Observability
Network Management

Network Performance Monitoring

NetFlow Traffic Analyzer

Network Configuration Manager

IP Address Manager

User Device Tracker

VoIP & Network Quality Manager

Log Analyzer

Engineer's Toolset

Network Topology Mapper

Kiwi CatTools

Kiwi Syslog Server

ipMonitor
Application Management

AppOptics

Loggly

Papertrail

Pingdom

DevOps
IT Security

Access Rights Manager

Identity Monitor

Security Event Manager

Patch Manager

Serv-U FTP & MFT
IT Service Management

SolarWinds Service Desk

Web Help Desk

DameWare Remote Support

DameWare Remote Everywhere

DameWare Mini Remote Control
System Management

Server & Application Monitor

Virtualization Manager

Storage Resource Monitor

Server Configuration Monitor

SolarWinds Backup

Web Performance Monitor
Database Management

Database Performance Analyzer

SQL Sentry

Database Performance Monitor

Task Factory
Content Exchange
Content Exchange

Find downloadable files and templates other users have built and found useful to share with others.
The Orion Platform

Alerts

Custom HTML

Custom Queries

Modern Dashboards

Reports

Scripts
Server & Application Monitor

API Pollers

Application Monitor Templates
Database Performance Analyzer

Custom Alerts

Custom Metrics

Custom Queries
Server Configuration Monitor

Policies

Profiles
Network Performance Monitor

Device Pollers

Universal Device Pollers
Network Configuration Manager

Config Change Scripts

Device Templates

Firmware Upgrade Templates

Policy Documents
SQL Sentry

Advisory Conditions
Web Help Desk

Style Sheets
Resources

Customer Portal
Create individual user accounts for your team, manage your licenses, download your SolarWinds software, create and track support tickets, and more.

Academy
A one-stop-shop for world-class training for SolarWinds products through on-demand videos, and instructor-led classes. All SolarWinds Academy content is included with every software purchase.

Support
Get help when you need it from a world-class support team, available to assist with technical product issues 24 hours a day, seven days a week, 365 days a year.

Partner Portal
Accelerate SolarWinds Partners’ ability to drive digital and IT transformation for customers with powerful tools, resources, and increased profit potential.
Free Tools & Trials
Store

NetFlow Traffic Analyzer (NTA)

Forum Netflow not coming in over site to site VPN tunnel for remote router

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 24 subscribers
Views 723 views
Users 0 members are here

Options

Related

This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Netflow not coming in over site to site VPN tunnel for remote router

mblanch over 15 years ago

i have a site connected via a VPN tunnel. There is a remote 1800 router. Previously, I have done this before and NetFlow data was coming in on a different site. For this one, it is not. I see the SolarWinds data such as up/down status and % utilization on interfaces but NetFlow not working. The "sh ip flow export" command shows data being exported but cannot get it working in Orion. Below is my configuration on the router:

interface FastEthernet0/0
description HTC 3x3 Connection
ip address xxxxxxxx 255.255.255.252
ip route-cache flow
duplex auto
speed auto
crypto map VPNMAP
service-policy output VoIP

ip flow-export source FastEthernet0/0
ip flow-export version 5
ip flow-export destination 172.16.30.19 2055

snmp-server community xxxxx RO
snmp-server enable traps tty
snmp-server host 172.16.30.19 xxxxxx

Thanks,

Mark

0 Nux over 15 years ago

do you need ingress or Egress on the interface?
Cancel
Vote Up 0 Vote Down

Cancel
0 mblanch over 15 years ago in reply to Nux

ingress
Cancel
Vote Up 0 Vote Down

Cancel
0 dbohls over 15 years ago

You cannot transfer Netflow packets over a site to site tunnel. You would need to set up an EZVPN. Its a known cisco issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 jswan over 15 years ago in reply to dbohls

Netflow also works fine if you use a GRE/IPSec configuration, which one of the easiest tunnel methods to set up and manage. Here's a sample config using pre-shared keys. For more scalability use DMVPN with a CA.
crypto isakmp policy 1
encr 3des
hash sha
authentication pre-share
group 2
crypto isakmp key foo address 2.3.4.5
crypto isakmp keepalive 20
!
crypto ipsec transform-set 3DES_SHA_TUNNEL esp-3des esp-sha-hmac
!
crypto ipsec profile GRE
set transform-set 3DES_SHA_TUNNEL
!
interface Tunnel0
ip address 10.1.1.1 255.255.255.252
ip mtu 1400
ip tcp adjust-mss 1260
tunnel source FastEthernet0/0
tunnel destination 2.3.4.5
tunnel protection ipsec profile GRE
Cancel
Vote Up 0 Vote Down

Cancel

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK^® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.