Mikrotik IPFIX Configuration

This document outlines the steps to configure IPFIX on a MikroTik device.

Configuration Steps

Move to RouterOS Path:

/ip traffic-flow;

Set the router to enabled:

set enabled=yes;

Set the interfaces:

set interfaces all;

Configure cache entries:

set cache-entries 32M;

Set active flow timeout:

set active-flow-timeout 1m;

Set inactive flow timeout:

set inactive-flow-timeout 15s;

Add the target:

/ip traffic-flow target;
add dst-address={MOTADATA_NETFLOW_SERVER_IP} port=2055 version=9;

Set template refresh and timeout:

set v9-template-refresh 5m;
set v9-template-timeout 20;

After completing the configuration, navigate to Menu > Flow Explorer and select the Event Source(s) and the associated Interface(s) from the drop-downs to view the active flow data.