Nokia Netflow v9 and IPFIX configuration for FastNetMon Advanced

FastNetMon Advanced has complete support for both Netflow v9 and IPFIX telemetry protocols provided by Nokia SR. For all new deployments, we recommend using the IPFIX protocol.

If you’re looking for options to detect attacks in 1-3 seconds, please check the alternative traffic capture protocol supported by Nokia.

To enable IPFIX support on Nokia SR, we can provide the following example configuration:

admin-state enable
export-mode automatic
inband-collector-export-only false
overflow 1
template-retransmit 60
use-vrtr-if-index false
active-flow-timeout 15
inactive-flow-timeout 15

sample-profile 1 {
    sample-rate 1000
}

collector 10.1.1.1 port 2055 {
    admin-state enable
    description "FastnetMon"
    autonomous-system-type origin
    router-instance "Base"
    template-set basic
    version 10
}

On FastNetMon’s side, you may specify the sampling rate if needed using this guide:

sudo fcli set main netflow_sampling_ratio 1000
sudo fcli set main netflow_custom_sampling_ratio_enable enable
sudo fcli commit

To specify the average calculation time value:

sudo fcli set main average_calculation_time 30
sudo fcli commit