5minutesisallit

ManageEngineNetFlowAnalyzer takes!

ManageEngineNetFlowAnalyzer
ProfessionalEdition
Getstartedin5minutes!

YouhavedownloadedtheNetFlowAnalyzerinstallationfile.Whatnext?!
ThisdocumentwillhelpyouinstallandrunNetFlowAnalyzerandviewreportswithin5minutes.
Followthestepsgivenbelow:

PREINSTALLATION
SystemRequirements:

ItisveryimportantthatyoumakesurethatyoursystemmeetstherequirementtorunNetFlow
Analyzer.

TherecommendedhardwarerequirementsforinstallingandrunningNetFlowAnalyzerareas
follows:

No.ofInterfacestobe Processor RAM Harddisk
Managed Space
Upto10(lowend 2.6GHzPD/3.0GHzP4HTorequivalent 512MB 20GB
routers)
1125 2.8GHzPDorequivalent 1GB 40GB
2650 2.6GHzCore2Duoorequivalent 1GB 60GB
51100 3.0GHzCore2Duo/2.4GHzdualcore 2GB 75GB
Xeon3000seriesorequivalent
101300 2.6GHzdualcore3000seriesXeon 4GB 225GB
Processororequivalent
301600 2.6GHzquadcore3000seriesXeon 4GB 450GB
Processororequivalent

TherecommendedsoftwarerequirementsforinstallingandrunningNetFlowAnalyzerareas
follows:

SupportedOperatingSystems SupportedBrowsers
WindowsVista InternetExplorer5.5andabove
Windows2000Server Firefox1.x
Windows2000ProfessionalwithSP4 Netscape7.0andabove
Windows2003Server Mozilla1.5andabove
WindowsXPwithSP1
RedHatLinux8.0
RedHatLinux9.0

Note:NetFlowAnalyzer6supportsNetFlowversions5/7/9,sFlow,cflowd,JFlow,IPFIX,
NetStream.ForrouterandswitchspecificationsrefertheConfiguringCiscoDevicessectionofthe
UserGuide.
1
 5minutesisallit
ManageEngineNetFlowAnalyzer takes!

INSTALLATION
MicrosoftWindows

Youcanbeginwiththeinstallationbydoubleclickingontheinstallationfile.Theinstallationwindow
willpromptyoutoselectthedestinationfolderforinstallation.

NetFlowAnalyzeruses8080asthedefaultwebportand9996asthedefaultNetFlowport,whereit
willreceivetheNetFlowpackets.BydefaultthelanguageisEnglish.Allthiscanbesettodifferent
valuesbychangingitduringinstallation.

InstalltheManageEngineNetFlowAnalyzerasservice.

Bycheckingthisbox,youenabletheNetFlowAnalyzertoautomaticallystartwhentheserver,on
whichManageEngineNetFlowAnalyzerisinstalled,starts.Thisisrecommendedifyouhavea
dedicatedserverforManageEngineNetFlowAnalyzer.

Registeringforfreetechnicalsupport.

Duringevaluationyouareentitledforfreetechnicalsupportforwhichyouneedtofilltheformwith
yourdetails.

BeginInstallation.

Atthisstepyoucanverifythechoicesyouhavemadeandproceedwiththeinstallationoryoucan
gobackandchangetheinformation.Clicknexttostartinstallation.

ClickFinish

Linux

DownloadtheBINfileandassignexecutepermissionusingthecommand:
chmoda+x<file_name>.bin
where<file_name>isthenameofthedownloadedBINfile.

Executethefollowingcommand:./<file_name>.bin

Andfollowtheinstructionsastheyappearinthescreen.


Congratulations!YouhavesuccessfullyinstalledNetFlowAnalyzer.
NOWWHAT?!

2
 5minutesisallit
ManageEngineNetFlowAnalyzer takes!

POSTINSTALLATION
AccessingNetFlowAnalyzer

ToaccessNetFlowAnalyzerenterthefollowingintheaddressbarofthebrowser:
http://localhost:8080
Note:Ifyouhavechanged8080(webport),youcanenterthesamehttp://localhost:port

3
 5minutesisallit
ManageEngineNetFlowAnalyzer takes!

Configuringflowexports
DuetothepopularityofCiscodeviceswewillbegivingyouthestepstoconfigureNetFlow.Forother
devicesyoucangettheconfigurationdetailshere.

FollowthestepsbelowtoconfigureNetFlowexportonaCiscoIOSdevice.

EnablingNetFlowExport


CiscoExpressForwardingisrequiredforNetFlowtowork.PleaseensurethatCEFisenabled
byapplyingthecommandipceffromtheglobalconfigurationmode.

ExportingNetFlowData

IssuethefollowingcommandstoexportNetFlowdatatotheserveronwhichNetFlowAnalyzeris
running:

Command Purpose

interface{interface} ThisenablesNetFlowontheparticularinterface.
{interface_number}
iproutecacheflow

ipflowexportdestination ExportstheNetFlowcacheentriestothespecifiedIPaddress.Usethe
{hostname|ip_address} IPaddressoftheNetFlowAnalyzerserverandtheconfiguredNetFlow
9996 listenerport.Thedefaultportis9996.
ipflowexportsource SetsthesourceIPaddressoftheNetFlowexportssentbythedeviceto
{interface} thespecifiedIPaddress.NetFlowAnalyzerwillmakeSNMPrequestsof
{interface_number} thedeviceonthisaddress.
ipflowexportversion5 SetstheNetFlowexportversiontoversion5.NetFlowAnalyzer
[peeras|originas] supportsonlyversion5,version7andversion9.Ifyourrouteruses
BGPyoucanspecifythateithertheoriginorpeerASisincludedin
exportsitisnotpossibletoincludeboth.
ipflowcachetimeout Breaksuplonglivedflowsinto1minutefragments.Youcanchoose
active1 anynumberofminutesbetween1and60.Ifyouleaveitatthedefault
of30minutesyourtrafficreportswillhavespikes.
Itisimportanttosetthisvalueto1minuteinordertogeneratealerts
andviewtroubleshootingdata.
ipflowcachetimeout Ensuresthatflowsthathavefinishedareperiodicallyexported.The
inactive15 defaultvalueis15seconds.Youcanchooseanynumberofseconds
between10and600.However,ifyouchooseavaluegreaterthan250
seconds,NetFlowAnalyzermayreporttrafficlevelsthataretoolow.
snmpserverifindexpersist EnablesifIndexpersistence(interfacenames)globally.Thisensures
thattheifIndexvaluesarepersistedduringdevicereboots.

FormoreinformationonBGPreportinginNetFlowAnalyzer,lookupthesectionon
ConfiguringNetFlowforBGP

4
 5minutesisallit
ManageEngineNetFlowAnalyzer takes!

VerifyingDeviceConfiguration

Issuethefollowingcommandsinnormal(notconfiguration)modetoverifywhetherNetFlowexport
hasbeenconfiguredcorrectly:

Command Purpose
showipflowexport ShowsthecurrentNetFlowconfiguration
showipcacheflow Thesecommandssummarizetheactiveflowsandgiveanindicationofhow
showipcache muchNetFlowdatathedeviceisexporting
verboseflow

ASampleDeviceConfiguration

ThefollowingisasetofcommandsissuedonaroutertoenableNetFlowversion5onthe
FastEthernet0/1interfaceandexporttothemachine192.168.9.101onport9996.

router#enable
Password:*****
router#configureterminal
router2621(config)#interfaceFastEthernet0/1
router2621(configif)#iproutecacheflow*
router2621(configif)#exit
router2621(config)#ipflowexportdestination192.168.9.1019996
router2621(config)#ipflowexportsourceFastEthernet0/1
router2621(config)#ipflowexportversion5
router2621(config)#ipflowcachetimeoutactive1
router2621(config)#ipflowcachetimeoutinactive15
router2621(config)#snmpserverifindexpersist
router2621(config)#^Z
router#write
router#showipflowexport
router#showipcacheflow

*repeatthesecommandstoenableNetFlowforeachinterface


PleasenotethatNetFlowdataexporthastobeenabledonallinterfacesofarouterinorder
toseeaccurateINandOUTtraffic.SupposeyouhavearouterwithinterfaceAandB.Since
NetFlow,bydefault,isdoneonaningressbasis,whenyouenableNetFlowdataexporton
interfaceA,itwillonlyexporttheINtrafficforinterfaceAandOUTtrafficforinterfaceB.The
OUTtrafficforinterfaceAwillbecontributedbytheNetFlowdataexportedfrominterfaceB.

EvenifyouareinterestedinmanagingonlyinterfaceA,pleaseenableNetFlowdataexport
onAandB.YoumaysubsequentlyunmanageinterfaceBfromtheLicenseManagementlink.

Forfurtherinformation:
Contactsupportatnetflowanalyzersupport@manageengine.com
Visitforums:http://forums.netflowanalyzer.com
Viewuserguide:http://manageengine.adventnet.com/products/netflow/help/index.html
Getyourselfafreedemobyfillingoutthisform