OpenForum RSS: Netflow egress + NAT

Netflow egress��+ NAT (Sqquirel)

Tue, 24 Nov 2009 08:03:18 GMT

�� !
�� ? �� .

Netflow egress + NAT (alexisks)

Thu, 11 Jan 2007 07:11:13 GMT

>�� . � �� IP Base 12.4 ��.
>
>2weris
>�� lopback

� � �� IP BASE 12.4 � �� (c1700-ipbasek9-mz.124-10a.bin), �� ADVANCED SECURITY 12.4(12) - c1700-advsecurityk9-mz.124-12.bin, �� IOS ��....

Netflow egress��+ NAT (sh_)

Thu, 11 Jan 2007 06:48:35 GMT

�� . � �� IP Base 12.4 ��.

2weris
�� lopback

Netflow egress��+ NAT (weris)

Thu, 11 Jan 2007 04:36:18 GMT

>>��. �� no ip flow-egress input-interface ��. :)
>
>� �� , �� (��, ��
>� ��, �� ):
>
>ip cef
>!
>ip flow-export version 5
>ip flow-export destination 10.0.0.3 9996
>!
>interface FastEthernet0/0 (LAN)
>ip address 10.1.0.2 255.0.0.0
>ip flow ingress
>ip flow egress
>ip nat inside
>....
>!
>interface Serial0/0 (WAN)
>ip address 80.XX.XXX.126 255.255.255.252
>ip nat outside
>....
>!
>
>�.�. ��
>sh ip cache flow
>Fa0/0 10.0.0.77
> Local
> 10.1.0.2 06
>06DF 0017 23
>Fa0/0 10.0.0.222
> Null
> 80.91.160.2 11 84F6 0035
> 1
>Fa0/0 10.0.0.5
> Null
> 195.137.203.194 06 B584 0015
> 2
>Fa0/0 80.XX.XXX.126
>Se0/0 87.1.17.242
> 06 E25F 9591 1
>
>Fa0/0 80.XX.XXX.126
>Se0/0 82.149.1.82
> 06 8077 4201 18
>F

Netflow egress + NAT (alexisks)

Wed, 10 Jan 2007 17:43:45 GMT

>��. �� no ip flow-egress input-interface ��. :)

� �� , �� (��, �� , �� ):

ip cef
!
ip flow-export version 5
ip flow-export destination 10.0.0.3 9996
!
interface FastEthernet0/0 (LAN)
ip address 10.1.0.2 255.0.0.0
ip flow ingress
ip flow egress
ip nat inside
....
!
interface Serial0/0 (WAN)
ip address 80.XX.XXX.126 255.255.255.252
ip nat outside
....
!

�.�. ��
sh ip cache flow
Fa0/0 10.0.0.77 Local 10.1.0.2 06 06DF 0017 23
Fa0/0 10.0.0.222 Null 80.91.160.2 11 84F6 0035 1
Fa0/0 10.0.0.5 Null 195.137.203.194 06 B584 0015 2
Fa0/0 80.XX.XXX.126 Se0/0 87.1.17.242 06 E25F 9591 1
Fa0/0 80.XX.XXX.126 Se0/0 82.149.1.82 06 8077 4201 18
Fa0/0 80.XX.XXX.126 Se0/0 72.141.13.183 06 B0B7 3946 2646
Fa0/0 80.XX.X

Netflow egress��+ NAT (sh_)

Wed, 10 Jan 2007 15:24:34 GMT

��. �� no ip flow-egress input-interface ��. :)

Netflow egress + NAT (alexisks)

Wed, 10 Jan 2007 11:59:56 GMT

>interface FastEthernet0/0
>no ip route-cache flow
>interface Serial0/0
>no ip route-cache flow

�� - �.�. �� ip route-cache flow �� , �� ...
� �� show ip cache flow �� -�� :(

Netflow egress��+ NAT (sh_)

Wed, 10 Jan 2007 11:24:36 GMT

interface FastEthernet0/0
no ip route-cache flow
interface Serial0/0
no ip route-cache flow

Netflow egress + NAT (alexisks)

Wed, 10 Jan 2007 10:03:00 GMT

�� :

cisco1760#show running-config
Building configuration...

Current configuration : 6085 bytes
!
! Last configuration change at 10:02:03 EET Wed Jan 10 2007 by adms
! NVRAM config last updated at 12:16:06 EET Tue Jan 9 2007 by alexis
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname cisco1760
!
boot-start-marker
boot system flash flash:c1700-ipbasek9-mz.124-10a.bin
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 8000 debugging
enable secret 5 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
!
aaa new-model
!
!
!
aaa session-id common
clock timezone EET 2
no ip source-route
ip cef
ip cef accounting per-prefix
!
!
ip tcp synwait-time 10
!
!
ip flow-egress input-interface
no ip bootp server
ip domain name XXXXXXXXXXXX.kiev.ua
ip ssh tim