VMware Aria Operations for Networks 中,可以為 Cisco 4500 系列交換器設定 NetFlow 收集器。

  1. 建立流程記錄

    configure terminal

    flow record netflow-original

    match ipv4 protocol

    match ipv4 source address

    match ipv4 destination address

    match transport source-port

    match transport destination-port

    match interface input

    collect transport tcp flags

    collect counter bytes

    collect counter packets

    collect timestamp sys-uptime first

    collect timestamp sys-uptime last

    End

  2. 建立流程匯出工具

    configure terminal

    flow exporter e1

    destination <PROXY_IP>

    transport udp 2055

    end

  3. 建立流程監視器

    configure terminal

    flow monitor m1

    record netflow-original

    exporter e1

    end

  4. 設定逾時

    configure terminal

    cache timeout inactive 30

    cache timeout active 60

    end

  5. 在入口模式和出口模式下或至少在入口模式下為每個介面設定流程監視器

    configure terminal

    interface <INTERFACE_NAME>

    ip flow monitor m1 unicast input

    end