Cisco 4331 ISRのコンフィグ

以下は、Cisco 4331 ISRのフローコンフィグサンプルです。
詳細に関しましては機器ベンダー様へお問い合わせください。

 

flow record NFArecordIN

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface input
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last


flow record NFArecordOUT

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface output
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last


flow exporter NFAexporter

destination NetFlow-server-ip
source interface-ip(layer3)
transport udp 9996
template data timeout 60
option interface-table timeout 60
option application-table timeout 60


flow monitor NFAmonitorIN

exporter NFAexporter
cache timeout active 60
record NFArecordIN


flow monitor NFAmonitorOUT

exporter NFAexporter
cache timeout active 60
record NFArecordOUT

監視対象とした全てのインターフェースを対象に以下を設定

ip flow monitor NFAmonitorIN input
ip flow monitor NFAmonitorOUT output