What's in this guide?
In this article you will find a quick guide on how to configure the flow sensor options in a redBorder manager.
After creating and connecting the flow sensor (as it appears in this guide), the following is to configure the sensor options. For this, you must go to the Sensors section.
The next step is to locate the flow sensor that you have created before. In this article we will use as reference TrafficSensor belonging to the fictitious company EvilCorp (Its purpose is to serve as a testing environment), but you can use any other you want.
Once you have accessed the corresponding sensor, you will see many sections and options that will be detailed below:
This section contains the set of main options belonging to the server configuration:
- Name: name of the flow sensor.
- IP or Network: IP address of the flow sensor (It corresponds to the IP of the flow exporter).
- Observation ID (optional): It is an numeric ID that will appear next to the sensor's IP address and is used as a reference.
- Description (optional): description of the flow sensor.
- License: license used that allows the sensor to be active.
- Version (optional): version of the sensor used as a reference.
- SPAN Port: sometimes called port mirroring or port monitoring, selects network traffic for analysis by a network analyzer. The network analyzer can be a Cisco SwitchProbe device or other Remote Monitoring (RMON) probe.
- LAN DNS resolution: the router can act as a DNS server and answer the DNS queries from LAN clients.
- WAN DNS resolution: the WAN DNS values specify the server that the router will use for its upstream DNS.
- Active NMSP: this manages communication between the mobility service engine and the Cisco wireless controller.
- Active Radius: for network access, a host connects to the network device and requests to use network resources. The network device identifies the newly connected host, and, using the RADIUS protocol as a transport mechanism, requests ACS to authenticate and authorize the user.
This section contains the configuration options necessary to link the sensor with the SNMP protocol, which allows you to manage network devices.
- Community: A user id or password that allows access to a router's or other device's statistics.
- Version: The version of the SNMP server used.
- v1: Specifies that the group is using the SNMPv1 security model. SNMPv1 is the least secure of the possible SNMP security models.
- v2c: Specifies that the group is using the SNMPv2c security model. The SNMPv2c security model allows informs to be transmitted and supports 64-character strings.
This section allows you to define a internal network to which the devices will belong.
- Name: Name of the internal network.
- Value: IP address and subnet mask of the internal network.
You can add a new home network by clicking on the Add button:
Once the process is finished, all that remains is to update the changes by clicking on the Update button.
Check Incoming Flow Data
If the flow sensor has been correctly configured, you should see flow data incoming in a way similar to the following image: