在 VMware Aria Operations for Networks 中,可以為 Cisco 4500 系列交換器設定 NetFlow 收集器。
- 建立流程記錄
configure terminal
flow record netflow-original
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect transport tcp flags
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
End
- 建立流程匯出工具
configure terminal
flow exporter e1
destination <PROXY_IP>
transport udp 2055
end
- 建立流程監視器
configure terminal
flow monitor m1
record netflow-original
exporter e1
end
- 設定逾時
configure terminal
cache timeout inactive 30
cache timeout active 60
end
- 在入口模式和出口模式下或至少在入口模式下為每個介面設定流程監視器
configure terminal
interface <INTERFACE_NAME>
ip flow monitor m1 unicast input
end