Use https://seceonhelp.freshdesk.com/support/login to access updated Knowledge Base Articles, Submit Technical Support Tickets and Review Status of submitted support tickets.
Configuring Cisco 7500 series router
To configure the Cisco 7500 series to routers, below are the steps:
1. Enabling Netflows
To enable NetFlow, use the following commands beginning in global configuration mode:
| Command | Purpose |
Step 1 | Router(config)# interface type slot/port-adapter/port (Cisco 7500 series routers) Or Router(config)# interface type slot/port (Cisco 7200 series routers) | Specifies the interface, and enter interface configuration mode. |
Step 2 | Router(config-if)# ip route-cache flow | Enables NetFlow for IP routing. |
2. Exporting Netflows to the CCE:
The routers must be individually configured to forward Netflow information to the IP address of the CCE.
Follow these steps on each router:
Command | Purpose |
Router(config)# ip flow-export ip-address udp-port version 5 [origin-as | peer-as] | Configures the router to export NetFlow cache entries to a workstation if you are using receiving software that accepts version 5. Optionally specify the origin or peer autonomous system. The default is to export neither AS that provides improved performance. |
The CCE’s IP Address should be used in the above command and the udp port number is: 9995, The CCE supports both Version 5 and Version 9 and IPFIX.
The distinguishing feature of Netflow Version 9 is that it is template based. Seceon OTM needs the
IN_BYTES, IN_PKTS, PROTOCOL, SRC_TOS, TCP_FLAGS, L4_SRC_PORT, IPV4_SRC_ADDR, SRC_MASK, INPUT_SNMP, L4_DST_PORT, IPV4_DST_ADDR, DST_MASK, DST_MASK, OUTPUT_SNMP, IPV4_NEXT_HOP, LAST_SWITCHED, FIRST_SWITCHED, SRC_AS.
For more details refer to https://www.plixer.com/support/netflow-v9/.
Example:
Router(config)# ip flow-export 192.168.419.44:9995 version 9 [origin-as | peer-as]
Seceon Inc. All rights reserved. https://www.seceon.com