Andrisoft Wanguard 5.2, Руководство пользователя и администратора, Страница: 66 / 73

WANGUARD 5.2 User Manual & Administrator's Guide
To confgure NDE use the same commands as for the IOS device. In the enable mode on the Supervisor
Engine, issue the following, to set up the NetFlow export version 5.
switch(config)# mls nde sender version 5
The following commands break up fows into shorter segments: ~1 minute for actve fows and ~ 30 seconds
for inactve fows. Please use only this values as it decreases the RAM usage and increases performance of Flow
Sensor.
switch(config)# mls aging long 8
switch(config)# mls aging normal 4
On the Supervisor Engine 1 issue the following to put full fows into the NetFlow exports:
switch(config)# mls flow ip full
If you have a Supervisor Engine 2 or 720 running IOS version 12.1.13(E) or higher, issue the following
commands instead:
switch(config)# mls flow ip interface-full
switch(config)# mls nde interface
Configuring NDE on a 4000 Series Switch
Confgure the switch the same as an IOS device, but instead of command ‘ip route cache fow’ use command
‘ip route-cache fow infer-felds’. This series requires a Supervisor IV with a NetFlow Services daughter card to
support NDE.
Configuring NDE on a Juniper Router
Juniper supports fow exports by the routng engine sampling packet headers and aggregatng them into
fows. Packet sampling is done by defning a frewall flter to accept and sample all trafc, applying that rule to the
interface and then confguring the sampling forwarding opton.
interfaces {
ge-0/1/0 {
unit 0 {
family inet {
filter {
input all;
output all;
}
address 192.168.1.1/24;
}
}
}
}
firewall {
filter all {
term all {
then {
sample;
- 65 -