Cisco 1841 Netflow Configuration :
flow exporter NETFLOW1
destination 192.168.1.254
source FastEthernet0/1
transport udp 9996
!
flow monitor NETFLOW
record netflow-original
exporter NETFLOW1
cache timeout active 1
!
interface FastEthernet0/1
description LAN-Interface
ip flow monitor NETFLOW input
!
interface FastEthernet0/0
description WAN-Interface
ip flow monitor NETFLOW input
end
Interface mode :
ip route-cache flow
!
config mode :
ip flow-cache timeout inactive 30
ip flow-cache timeout active 60
ip flow-cache entries 10240
ip flow-egress input-interface
ip flow-capture vlan-id
ip flow-capture ip-id
ip flow-export source vlan 2
ip flow-export version 5
ip flow-export destination 192.168.2.4 9996
ip flow-top-talkers
top 10
sort-by bytes
cache-timeout 3600000
match protocol tcp
!
ip flow-capture packet-length
ip flow-capture ttl
ip flow-capture mac-addresses
!
ip route 192.168.2.4 255.255.255.255 (Wan Interface ip address)
“If going over ipsec vpn. To force packets to traverse the vpn link”.
!
show ip cache flow