Netflow not working on cisco site-to-site vpn router
Hi Guys I have configured netflow on one of our branch office routers that connects by site-to-site vpn over the internet to our Cisco ASA 5500 back at our HQ, I am not seeing any netflow data coming...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
You have to use a VPN technology that supports netflow on the router. Virtual Tunnel Interfaces is the one we use on CISCO 2900/1900 running v15 whatever IOS. We use routers at both ends, no ASA for...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
I had the exact same issues. It took a lot of searching, but I discovered that I needed the "output-features" and "export-protocol" commands in my flow exporter. "output-features" - requires 12.4(20)....
View ArticleRe: Netflow not working on cisco site-to-site vpn router
Well, it depends on how it is configured, which router, and what IOS version Did you use the same template?
View ArticleRe: Netflow not working on cisco site-to-site vpn router
I seem to be getting flows after readding your template of commands so thank you once again, but the last router will let me enter all commands but " ip flow monitor MONITOR-1 input " on the external...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
Is it working on the other interfaces, just not the external? Or is it not working on any interface?
View ArticleRe: Netflow not working on cisco site-to-site vpn router
i can add the command to vlan 1 but not the external, however i cant see any flows on the server
View ArticleRe: Netflow not working on cisco site-to-site vpn router
See my original response:"output-features" - requires 12.4(20). Is required to send Netflow packets over the VPN tunnel"export-protocol" - requires 12.4(22). Specifies what version of Netflow...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
ok i will arrange that thanks for your help
View ArticleRe: Netflow not working on cisco site-to-site vpn router
this is what works for me in global config do this and be sure to change the port to the one you use, i use 9996 ip flow-cache timeout inactive 10ip flow-cache timeout active 1ip flow-export source...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
Does this work over an IPSEC VPN? I have attempted this setup (traditional Netflow), but was never able to get this to send flows over my VPN.
View ArticleRe: Netflow not working on cisco site-to-site vpn router
i suggest that you run wire shark on both ends of the VPN.then compare what is sent out vs what is received. you have have some traffic being blocked
View ArticleClik here to view.
Re: Netflow not working on cisco site-to-site vpn router
So you are using a Site-to-Site IPSEC VPN with this config?
View ArticleRe: Netflow not working on cisco site-to-site vpn router
Well, it depends on how it is configured, which router, and what IOS version Did you use the same template?
View ArticleRe: Netflow not working on cisco site-to-site vpn router
I seem to be getting flows after readding your template of commands so thank you once again, but the last router will let me enter all commands but " ip flow monitor MONITOR-1 input " on the external...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
Is it working on the other interfaces, just not the external? Or is it not working on any interface?
View ArticleRe: Netflow not working on cisco site-to-site vpn router
i can add the command to vlan 1 but not the external, however i cant see any flows on the server
View ArticleRe: Netflow not working on cisco site-to-site vpn router
See my original response:"output-features" - requires 12.4(20). Is required to send Netflow packets over the VPN tunnel"export-protocol" - requires 12.4(22). Specifies what version of Netflow...
View ArticleRe: Netflow not working on cisco site-to-site vpn router
ok i will arrange that thanks for your help
View ArticleRe: Netflow not working on cisco site-to-site vpn router
this is what works for me in global config do this and be sure to change the port to the one you use, i use 9996 ip flow-cache timeout inactive 10ip flow-cache timeout active 1ip flow-export source...
View Article
