Andrisoft Wanguard 5.2, Руководство пользователя и администратора, Страница: 64 / 73

WANGUARD 5.2 User Manual & Administrator's Guide
Appendix 2 – Configuring NetFlow Data Export
This appendix is a brief guide to setng up the NetFlow data export (NDE) on Cisco and Juniper routers or
intelligent Cisco Layer 2 / Layer 3 / Layer 4 switches. If you have problems with the confguraton contact your
network administrator or Cisco consultant. For devices that run hybrid mode on a Supervisor Engine (Catalyst 65xx
series) it is recommended to confgure IOS NDE on the MSFC card and CatOS NDE on the Supervisor Engine. For
more informaton about setng up NetFlow please visit htp://www.cisco.com/go/netlow .
Configuring NDE on an IOS Device
In the confguraton mode on the router or MSFC, issue the following to start NetFlow Export.
First enable Cisco Express Forwarding:
router(config)# ip cef
router(config)# ip cef distributed
And turn on fow accountng for each input interface with the interface command:
interface
ip route-cache flow
For example:
interface FastEthernet0
ip route-cache flow
interface Serial2/1
ip route-cache flow
It is necessary to enable NetFlow on all interfaces through which trafc (you are interested in) will fow.
Now, verify that the router (or switch) is generatng fow stats – try command 'show ip cache fow'. Note that for
routers with distributed switching (GSR's, 75XX's) the RP cli will only show fows that made it up to the RP. To see
fows on the individual line cards use the 'atach' or 'if-con' command and issue the 'sh ip ca f' on each LC.
Enable the exports of these fows with the global commands:
router(config)# ip flow-export version 5
router(config)# ip flow-export destination <ip_address> 2000
router(config)# ip flow-export source FastEthernet0
Use the IP address of your Flow Sensor's server and the confgured listening port. UDP port 2000 is used as
an example. The ‘ip fow-export source’ command is used to set up the source IP address of the exports sent by the
equipment.
If your router uses the BGP protocol, you can confgure AS to be included in exports with command:
router(config)# ip flow-export version 5 [peer-as | origin-as]
- 63 -