How can we help?

How to configure IPFIX on pfSense firewalls

Follow

These instructions assume:

Installing softflowd

  1. Log into the pfSense firewall web admin console.
  2. Navigate to System > Package Manager > Available Packages.
  3. Find the softflowd package and select the + Install Button.

Configure IPFIX 

  1. Navigate to Services > softflowd.
  2. Under General Settings:
    1. Enable softflowd.
    2. Select all the interfaces you wish to collect flow data on.
    3. In the Host field, enter the collector IP to receive the flow data.
    4. In the Port field, choose one of the following ports: 2055, 2056, 4432, 4739, 6343, 9995, or 9996.
    5. In the Max Flows field, enter 8192.
    6. Select Netflow Version 10.
    7. Set Flow Tracking Level to Full.
  3. Under Timeout Values
    1. In the General field, enter 60.
    2. In the Maximum Lifetime field, enter 60.
    3. In the Expire Interval field, enter 0.
    4. In the TCP field, enter 60.
    5. In the TCP RST field, enter 60.
    6. In the TCP FIN field, enter 60.
    7. In the UDP field, enter 60.
  4. Click Save.

IPFIX is now enabled on your pfSense firewall.

Was this article helpful?
4 out of 4 found this helpful
Have more questions? Submit a request