Configuring Flow Exports on MikroTik Devices
For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller.
Configure Internet Protocol Flow Information Export (IPFIX) on MicroTik switches and wireless devices using the following commands:
set enabled=yes;
set interfaces all;
set cache-entries 32M;
set active-flow-timeout 1m;
set inactive-flow-timeout 15s;add dst-address={NETFLOW_SERVER_IP} port={NETFLOW_SERVER_LISTENER_PORT} version=9;
set v9-template-refresh 5m;
set v9-template-timeout 20;
Follow the steps below to configure flow exports on Mikrotik devices using the graphical user interface (GUI):
- Log in to your MikroTik device to access the GUI.
- Click + and add Target.
- Enter the following details in the Traffic Flow Targetpop-up:
- Address: Enter the IP address of the machine on which Site24x7 On-Premise Poller is installed.
- Port: Enter the listener port of Site24x7 On-Premise Poller.
- Version: Select 9.
- v9 Template Refresh: Enter 5.
- v9 Tamplate Timeout: Enter 20.
- Click OK.
After adding the target, click Settings to configure the traffic flow settings.
- Go to the General tab.
- Check the box next to Enabled for sending the flows.
- Select all for Interfaces.
- Select 32k for Cache Entries.
- Enter 00:01:00 in Active Flow Timeout.
- Enter 00:00:15 in Inactive Flow Timeout.
- Click OK.