I'm looking at putting a RB450G in place as a sort of 'tap' on a network (between the router and the switch). My hope is to have the RB act as a silent bridge (possibly ponding two nics for in traffic and 2 for out traffic) while pushing netflow-v5 to a machine (running silk tools).
I currently have the device running with a bridge covering 4 of the nics. Placing it between the router and the switch works, all hosts continue to have network access (so the bridge seems to work). I have also implemented traffic-flow and have enabled it across all interfaces.
- Traffic flow does not seem to be reporting all flows, any thoughts on this?
- When looking (in winbox) at the bridge interface, how come the statistics (packets in / out, etc etc) do not reflect the combination (summation) of all the ports included in the bridge?