In the previous video, we created a flow record, and that flow record when it's
used is going to be
matching on the IPv4 source and destination IP addresses as well as the IPv4
protocol in use.
And then in addition to that match that we did in the previous video, we also
said regarding those
flows, let's go ahead and collect additional information regarding IPv4 type of
service bits
and the TTL and the application. There's one of the cool things about NetFlow
is we can pretty
much pick and choose almost anything from layer two all the way up to the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
much pick and choose almost anything from layer two all the way up to the
application layer that
we wanted to collect about our existing flows. So our next step then is to go
ahead and create
an exporter. And as we talked about in the previous video, what we're going to
do is take the day
that we cache here locally, and we're going to send it over to the IP address
23.1.2.100 on port 9996,
because that's where that server has been configured to listen for incoming Net
Flow.
And to configure that, we'll do it under the exporter. We're also going to
specify we're going to
source that traffic from the loopback zero interface here in R2, which is 2222. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
source that traffic from the loopback zero interface here in R2, which is 2222.
So the server is already
set up expecting to receive NetFlow traffic on this port from the source
address of 2222 here on R2.
So let's go to R2 and create the flexible NetFlow entity of the exporter. So
here in R2, let's confirm
the flow record we created in the previous video. And we can do that with a
show flow record.
And there it is in all of us glory. Next, let's create our flow exporter. Now,
just to verify us to do
show flow exporter and press enter, and we don't have one. Great, great, great.
So let's go ahead
and create one to do that. We'll type in flow exporter and let's name this our WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and create one to do that. We'll type in flow exporter and let's name this our
flow dash exporter.
And then we're in flow exporter configuration mode. And so if we do a question
mark here,
let's specify first of all the destination of the server, the collector that's
expecting to receive
this cached information. So we'll type in destination, the address of our
server, which is 23.1.2.100.
So we'll put that into 23.1.2.100. Next, let's specify the transport protocols.
We'll go ahead
and put transport there space and let's use UDP because this is the servers WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and put transport there space and let's use UDP because this is the servers
configured to receive
on. And for the port, it's going to be 9996. And that would again depend on
what port your
NetFlow collector is set up to listen on. So press enter. And then finally, let
's also go ahead
and source our traffic from our loopback interface here on R2. So we'll say
source space question mark.
Then we'll specify loopback zero as the interface we have sourcing from.
Let's also do a do show IP interface brief, just to verify that we do have loop
back zero.
And it is at 222 fantastic. So now if you do a show flow exporter and press WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And it is at 222 fantastic. So now if you do a show flow exporter and press
center,
here is our flow exporter, it's user defined. That's because we just created it
. It's going to be
using NetFlow version nine. Here's the destination IP address of our server.
Here's our source address
we're going to use, which is based on loopback zero. We're going to be using
UDP port 9996.
So if we do a show flow record, that's identifying what we're matching on to
identify flows of traffic.
And then we're also additionally collecting this information about those flows. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we're also additionally collecting this information about those flows.
If we do a show
flow exporter and press enter, here's who were saying that information to. And
so the next step
to put this all together is we need to create a flow monitor. And in that flow
monitor, we're
going to apply it to one or more of our interfaces here on our two. So as part
of the flow monitor,
it's going to identify which record we're going to go ahead and use to identify
flows of traffic
and which information to collect. And as part of that flow monitor that we're
going to apply to an
interface, it's also going to include the information on which flow exporter we WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
interface, it's also going to include the information on which flow exporter we
're going to use.
So the next video, we're going to use the flow record that we created, which is
this one right
here to identify what constitutes a flow. And we're also going to include in
our monitor this flow
exporter called our flow exporter. So I'll see you in the next video as we
configure our flow monitor.