How to configure NetFlow on ADTRAN NetVanta routers

NetFlow v9 is supported on ADTRAN AOS firmware version 17.2.1 or higher.

These instructions assume:

• The date, time and time zone are correctly set on the router.
• You have Telnet or SSH credentials and access to your ADTRAN NetVanta router.
• The IP address of your Auvik collector is known.

If you have a shared collector and want to ensure that it receives netflow data to enable TrafficInsights, you will need to add the source IP address as a /32 in order for Auvik to register the flows from that specific address in the TrafficInsights portal. There may be some delay for the shared collector to receive the data after the change.

Note: Even if that source IP address is already being scanned, you must add a /32 targeting only the source IP address, due to some limitations, the collector can’t tell if it should be sent to site A or B.

Access your router CLI

1. Telnet or SSH into your router.
2. Enter privileged mode by typing enable and entering your enable password.

Enable netflow

1. On your router, execute the following command. Replace AuvikCollectorIP with the IP of your Auvik collector and AuvikPort with one of the following ports: 2055, 2056, 4432, 4739, 6343, 9995, or 9996.

   interface ethernet 0/1
   ip ffe
   ip flow ingress auvik
   ip flow export destination <AuvikCollectorIP> <AuvikPort>
   ip flow cache timeout active 60
   ip flow export template timeout-rate 180
   ip flow cache sample one-out-of 1 random
   
   Exit

2. Run the following command to confirm the configuration: show ip flow
3. Exit configuration mode and save changes.
4. Save the current running configuration to the startup configuration file: copy running-config startup-config

Reference:

• https://supportforums.adtran.com/servlet/JiveServlet/previewBody/1642-102-2-1693/Configuring%20Integrated%20Traffic%20Monitoring%20(ITM)%20in%20AOS.pdf