Use https://seceonhelp.freshdesk.com/support/login to access updated Knowledge Base Articles, Submit Technical Support Tickets and Review Status of submitted support tickets.

Configuring Cisco 7500 series router

To configure  the Cisco 7500 series to routers, below are the steps: 

1. Enabling Netflows

To enable NetFlow, use the following commands beginning in global configuration mode:

 

Command

Purpose

Step 1 

Router(config)# interface type slot/port-adapter/port (Cisco 7500 series routers)


Or

Router(config)# interface type slot/port (Cisco 7200 series routers)

Specifies the interface, and enter interface configuration mode.

Step 2 

Router(config-if)# ip route-cache flow

Enables NetFlow for IP routing.


2. Exporting Netflows to the CCE:


The routers must be individually configured to forward Netflow information to the IP address of the CCE.  

Follow these steps on each router:



Command

Purpose

Router(config)# ip flow-export ip-address udp-port version 5 [origin-as | peer-as]

Configures the router to export NetFlow cache entries to a workstation if you are using receiving software that accepts version 5. Optionally specify the origin or peer autonomous system. The default is to export neither AS that provides improved performance.




The CCE’s IP Address should be used in the above command and the udp port number is:  9995, The CCE supports both Version 5 and Version 9 and IPFIX.

The distinguishing feature of Netflow Version 9 is that it is template based.  Seceon OTM needs the

IN_BYTES, IN_PKTS, PROTOCOL, SRC_TOS, TCP_FLAGS, L4_SRC_PORT, IPV4_SRC_ADDR, SRC_MASK, INPUT_SNMP, L4_DST_PORT, IPV4_DST_ADDR, DST_MASK, DST_MASK, OUTPUT_SNMP, IPV4_NEXT_HOP, LAST_SWITCHED, FIRST_SWITCHED, SRC_AS.

For more details refer to  https://www.plixer.com/support/netflow-v9/.

Example:  
Router(config)# ip flow-export 192.168.419.44:9995 version 9 [origin-as | peer-as]

Seceon Inc. All rights reserved. https://www.seceon.com