Netflow on BVI Interface : Is it Possible?

Question

Hi!

Has anyone had a set-up where in there is this two routers facing 2 different ISPs. Set-up is Solarwinds -> Switch -> Firewall -> Router -> ISP

| |

Solarwinds -> Switch -> Firewall -> Router -> ISP

The user would like to monitor the ingress traffic on the router and the egress traffic of the router going to the internet. What we did was to configure the netflow on both physical interfaces of the router, facing the firewall and the isp..however, we could not see any flow destined to solarwinds on the router...By the way routers are logically connected by bridged, thus it has this BVI interface.....Members of the BVI interfaces are the interface of the router facing the firewall and the interface connection of the 2 routers. Do we need to configure the netflow on the BVI interface and not on the member physical interfaces to make the netflow work?

njoylif · Accepted Answer

is everything plugged into the switch or ISP directly into router directly into FW?
if not, one option would be (depending on the switch) would be to vlan it out and get netflow from the switch, then you'd be able to differentiate which ISP it came from as well.