WANGUARD 5.2 User Manual & Administrator's Guide
The following commands break up fows into shorter segments: 1 minute for actve trafc and 30 seconds
for inactve trafc. Please use only this values as it decreases the RAM usage and increases performance of the Flow
Sensor.
router(config)# ip flow-cache timeout active 1
router(config)# ip flow-cache timeout inactive 30
In enable mode you can see current NetFlow confguraton and state.
router# show ip flow export
router# show ip cache flow
router# show ip cache verbose flow
Configuring NDE on a CatOS Device
In privileged mode on the Supervisor Engine enable NDE:
switch> (enable) set mls nde <ip_address> 2000
Use the IP address of your Flow Sensor's server and the confgured listening port. UDP port 2000 is used
only as an example.
switch> (enable) set mls nde version 5
The following command is required to set up fow mask to full fows.
switch> (enable) set mls flow full
The following commands break up fows into shorter segments: ~1 minute for actve fows and ~ 30 seconds
for inactve fows. Please use only this values as it decreases the RAM usage and increases performance of Flow
Sensor.
switch> (enable) set mls agingtime long 8
switch> (enable) set mls agingtime 4
If you want to account all trafc within the specifed VLANs rather then inter VLAN trafc use CatOS 7.2 or
higher and issue the following command:
switch> (enable) set mls bridged-flow-statistics enable
And enable NDE:
switch> (enable) set mls nde enable
To see current NetFlow confguraton and state issue the following commands:
switch> (enable) show mls nde
switch> (enable) show mls debug
Configuring NDE on a Native IOS Device
- 64 -
Summary of Contents for Wanguard 5.2
Page 1: ......