NetFlow Analyzer ナレッジベース

Cisco Catalyst 3850 flexible NetFlow 設定例


[グローバルコンフィグレーションモード]

flow record NFA_Rec_In

match ipv4 tos

match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

match flow direction

match interface input

collect interface output

collect counter bytes long

collect counter packets long

collect timestamp absolute first

collect timestamp absolute last

collect transport tcp flags

 

flow record NFA_Rec_Out

match ipv4 tos

match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

match flow direction

match interface output

collect interface input

collect counter bytes long

collect counter packets long

collect timestamp absolute first

collect timestamp absolute last

collect transport tcp flags

 

flow exporter NFA_Xptr

destination 10.6.0.90

transport udp 9996

source gigabitEthernet1/0/1
(gigabitEthernet1/0/1 をNeFlow 送信元インターフェースとする場合)

 

flow monitor NFA_Mtr_In

exporter NFA_Xptr

cache timeout active 60

record NFA_Rec_In

 

 

flow monitor NFA_Mtr_Out

exporter NFA_Xptr

cache timeout active 60

record NFA_Rec_Out

 

[インターフェースコンフィグレーションモード]

interface GigabitEthernet1/1/1

ip flow monitor NFA_Mtr_In input

ip flow monitor NFA_Mtr_Out output

 

Uplink port と Vlan インターフェイスに関連付けてください。
ex,
vlan configuration 101-103,231
ip flow monitor NFA_Mtr_In input
ip flow monitor NFA_Mtr_Out output