Configuring NetFlow on Vyatta Routers

     

    Configuring NetFlow on a Vyatta is fairly simple:

    1. For a start we set the NetFlow version.

    set system flow-accounting netflow version 9

     

    2. To export flows to the collector where the NetFlow reporting tool is installed, we will need to set the flow destination. A flow destination is the IP address of the NetFlow collector and the listening port.

    set system flow-accounting netflow server <NFA server IP> port <Port #>

    Ex: set system flow-accounting netflow server 192.168.0.1 port 9996

     

    3. Then we issue the following command for every interface you want to monitor

    set system flow-accounting interface <interface name>

    Ex: set system flow-accounting interface eth0

     

    4. Since our NetFlow and sFlow Analyzer expects flows every minutes let’s make sure the active flow timeout is set to 1 minutes. By default this is already set to 1 minute or 60 seconds.

    set system flow-accounting netflow timeout expiry-interval 60

     

    5. Vyatta flow accounting can be resource intensive when statistics are being collected on all received packets. The alternative is to turn on sampling where 1 packet is accounted for every N packets, N being the sampling rate.

    set system flow-accounting netflow sampling-rate N

    Ex: set system flow-accounting netflow sampling-rate 500

     

    6. Finally, the following commands will set other essential Vyatta flow accounting parameters.

    set system flow-accounting netflow engine-id  id (id values range between 0 – 255)
    set system flow-accounting netflow timeout max-active-life 604800
    set system flow-accounting netflow timeout flow-generic 3600
    set system flow-accounting netflow timeout tcp-fin 300
    set system flow-accounting netflow timeout tcp-generic 3600
    set system flow-accounting netflow timeout tcp-rst 120
    set system flow-accounting netflow timeout icmp 300
    set system flow-accounting netflow timeout udp 300

     

    Please refer the below link for more details:

    https://blogs.manageengine.com/network/netflowanalyzer/2012/02/02/netflow-configuration-for-vyatta-router.html