在 VMware Aria Operations for Networks 中,可以为 Cisco 4500 系列交换机配置 NetFlow 收集器。
- 创建流记录
configure terminal
flow record netflow-original
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect transport tcp flags
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
End
- 创建流导出器
configure terminal
flow exporter e1
destination <PROXY_IP>
transport udp 2055
end
- 创建流监控器
configure terminal
flow monitor m1
record netflow-original
exporter e1
end
- 配置超时
configure terminal
cache timeout inactive 30
cache timeout active 60
end
- 在输入模式和输出模式下或者至少在输入模式下为每个接口配置流监控器
configure terminal
interface <INTERFACE_NAME>
ip flow monitor m1 unicast input
end