I have configured two of our Cisco 3945 Internet routers to export netflow to Solarwinds. 50% of the traffic that NTA 4.0.1 categorizes is classified as AS 0. Am I not supposed to use the origin-as option or is this an issue with the NTA configuration? Below is the Cisco configuration...
NetFlow Configuration:
ip flow-export version 9 origin-as
ip flow-export template refresh-rate 15
ip flow-export destination 2.2.2.2 2055
!
interface GigabitEthernet0/1
description Internet Circuit
ip address 1.1.1.1 255.255.255.0
ip flow ingress
duplex full
speed 1000
end