4.2. Device settings

In the device setting you can manage all NDE devices, such as routers or L3/L4 switches. If you want to see the state of various interfaces and/or interfaces names, it is necessary to set up the SNMP parameters as a community string and the IP address of the device. We recommend using a read-only community string for security reasons. The IP address is the same as that used for NetFlow data exports. In most cases use the IP address of the interface closest to the NetFlow collector. The Appendix B, Frequently Asked Questions will show you how to find this IP address.

In device setting you can modify sampling values. If you're using NetFlow sampling on the router, every N packet is added to the info flows, so in total sum you see only ~ 1/N data rate. When using this option all incoming traffic will be multiplied by this constant. You can also resample flows in the collector, which helps when the database is overloaded. You can set resampling to level 5, so that every fifth flow will be counted and the remaining four will be discarded.

Option "Automatically creates new collectors" which causes that master process listen to all incoming packets. If the source IP address is the same as the IP address of configured device, this option will automatically create a new collector, that listens to this traffic. If this option is available, we recommend creating all the collectors manually.

In the list of devices you can use the "Interfaces" command. This command displays a new window that allows you to enter a name and comment for that particular interface.

In the list of devices you can use the "config file" command. This command creates a netflow configuration for the selected device. Netflow configuration generation is supported only for IOS/CatOS Cisco compatible devices and those which are accessible via SNMP protocol.

Figure 4.7. Device settings window.

Device settings window.