51-17
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 51 Configuring NDE
Configuring NDE
Configuring a Port Flow Filter
To configure a destination or source port flow filter, perform this task:
This example shows how to configure a port flow filter so that only expired flows to destination port 23
are exported (assuming the flow mask is set to full):
Router(config)#
mls nde flow include dest-port 23
Router(config)#
Configuring a Host and Port Filter
To configure a host and TCP/UDP port flow filter, perform this task:
This example shows how to configure a source host and destination TCP/UDP port flow filter so that
only expired flows from host 171.69.194.140 to destination port 23 are exported (assuming the flow
mask is set to ip-flow):
Router(config)#
mls nde flow include source 171.69.194.140 255.255.255.255 dest-port 23
Configuring a Host Flow Filter
To configure a destination or source host flow filter, perform this task:
This example shows how to configure a host flow filter to export only flows to destination host
172.20.52.37:
Router(config)#
mls nde flow include destination 172.20.52.37 255.255.255.225
Router(config)#
Command
Purpose
Router(config)#
mls nde flow
{
exclude
|
include
}
{
dest-port
number
|
src-port
number
}
Configures a port flow filter for an NDE flow.
Router(config)#
no mls nde flow
{
exclude
|
include
}
Clears the port flow filter configuration.
Command
Purpose
Router(config)#
mls nde flow
{
exclude
|
include
}
{
destination
ip_address mask
|
source
ip_address mask
{
dest-port
number
|
src-port
number
}}
Configures a host and port flow filter for an NDE flow.
Router(config)#
no mls nde flow
{
exclude
|
include
}
Clears the port flow filter configuration.
Command
Purpose
Router(config)#
mls nde flow
{
exclude
|
include
}
{
destination
ip_address mask
|
source
ip_address mask
|
protocol
{
tcp
{
dest-port
number
|
src-port
number
}
|
udp
{
dest-port
number
|
src-port
number
}}
Configures a host flow filter for an NDE flow.
Router(config)#
no mls nde flow
{
exclude
|
include
}
Clears port filter configuration.
