flow路由器/交换机配置（一）

1.1.1      最典型的cisco netflow版本5配置示例

router-2621(config)#interface FastEthernet 0/1 router-2621(config-if)#ip route-cache flow

router-2621(config)#ip flow-export version 5 router-2621(config)#ip flow-export destination 10.4.3.125 9996                                    此地址为网络分析仪的网卡地址 router-2621(config)#ip flow-export source FastEthernet 0/1 router-2621(config)#ip flow-cache timeout active 1 router-2621(config)#ip flow-cache timeout inactive 15

router-2621(config)#snmp-server ifindex persist router-2621(config)#snmp-server community xxxxx ro                                      community字串，例如pulic

 

 

1.1.2      cisco netflow 版本9配置示例

int pos 2/0/1   ip flow ingress   ip flow egress !

Ip flow version 9 peer-as Ip flow destination 10.4.3.125 9996 Ip flow source loopback 0 ip flow-cache timeout active 1 ip flow-cache timeout inactive 15

snmp-server ifindex persist snmp-server community xxxx RO

 

 

1.1.3      cisco catalyst 三层交换机6500 /7600 neflow v5/v7配置示例：

PFC	MSFC
(config)# mls netflow (config)# mls flow ip interface-full (config)# mls aging ...   (config)# mls nde sender [version {5 | 7}] (config)# mls nde interface	interface fe 0/1  ip route-cache flow ! ip flow-export version 5 ip flow-export source loopback 0 ip flow-export destination 10.4.3.125 9996

 

 

1.1.4      cisco catalyst 6500 CatOS(MLS) 指令集v5/v7配置示例

Catos(enable)set mls flow full Catos(enable)set mls nde enable Catos(enable)set mls nde version 7 Catos(enable)set mls nde 10.4.3.125 9996

Catos(enable)session 15

MSFC(config)#ip flow-export version 5 MSFC(config)#ip flow-export source vlan 1 MSFC(config)#ip flow-export destination 10.4.3.125 9996 MSFC(config)#interface Vlan10 MSFC(config-if)#ip route-cache flow MSFC(config)#interface Vlan20 MSFC(config-if)#ip route-cache flow MSFC(config)#interface fastEthernet 3/1 MSFC(config-if)#ip route-cache flow