Configuring Cisco ISR Series Devices

This document provides the necessary commands to configure Cisco ISR 4321 series devices for exporting Motadata NetFlow data with NBAR information.

Configuration Steps

Enter configuration mode on your Cisco ISR device.

Configure the flow records:

flow record MFErecordIN
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface input
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow record MFErecordOUT
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface output
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last

Configure the flow exporter:

flow exporter MFEexporter
destination MOTADATA_NETFLOW-server-ip
source interface-ip(layer3)
transport udp 2055
template data timeout 60
option interface-table timeout 60
option application-table timeout 60

Create the flow monitors:

flow monitor MFEmonitorIN
exporter MFEexporter
cache timeout active 60
record MFErecordIN
flow monitor MFEmonitorOUT
exporter MFEexporter
cache timeout active 60
record MFErecordOUT

If you monitor only one interface in ObserveOps (formerly known as AIOps) Flow Explorer, apply the following commands:

ip flow monitor MFEmonitorIN input
ip flow monitor MFEmonitorOUT output

After completing the configuration, navigate to Menu > Flow Explorer and select Explorer to view the active flow data.