[Survey] The 2025 Observability Survey - Share your opinion and earn $10.Take the survey

Configuring Cisco ISR Series Devices

Please use the below commands in the config mode to Configure Cisco ISR 4321 series device to export netflow with NBAR information:

flow record NFArecordIN

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface input
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last


flow record NFArecordOUT

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface output
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last


flow exporter NFAexporter

destination NetFlow-server-ip
source interface-ip(layer3)
transport udp 9996
template data timeout 60
option interface-table timeout 60
option application-table timeout 60


flow monitor NFAmonitorIN

exporter NFAexporter
cache timeout active 60
record NFArecordIN


flow monitor NFAmonitorOUT

exporter NFAexporter
cache timeout active 60
record NFArecordOUT

Please configure the below command if you monitor only one interface in NetFlow Analyzer

ip flow monitor NFAmonitorIN input
ip flow monitor NFAmonitorOUT output

Back to Top