1, 在设备上配置 netflow.
1netflow v5
全局配置:
- ip flow-export source Vlan200
- ip flow-export version 5
- ip flow-export destination 10.16.6.166 9996
接口配置:
- interface GigabitEthernet0/1
- ip flow ingress
- ip flow egress
- 2netflow v9
全局配置 record 部分:
- flow record NetFlow
- match ipv4 source address
- match ipv4 destination address
- match ipv4 protocol
- match transport source-port
- match transport destination-port
- collect interface input
- collect interface output
- collect counter packets
- collect counter bytes
全局配置 exporter 部分:
- flow exporter NetFlow
- destination 10.16.6.166
- source GigabitEthernet0/1
- transport udp 9996
全局配置 monitor 部分:
- flow monitor NetFlow
- exporter NetFlow
- record NetFlow
接口配置:
- interface GigabitEthernet0/1
- ip flow monitor NetFlow input
- ip flow monitor NetFlow output
2, 登陆 netflow 管理平台, 一般选用 solarwinds 或者 ManageEngine. 登陆设备将相应设备添加进管理平台后, 可以进行流量分析. 同时, 也可设置流量监控告警.
来源: http://www.bubuko.com/infodetail-2969425.html