配置 Cisco ASR 1k 系列设备

请在设备的配置模式下配置下面的命令, 配置Cisco ASR 1k系列设备以使用NBAR信息导出流的步骤如下:

flow record NFArecord

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match application name
collect interface output
collect transport tcp flags
collect counter bytes long
collect counter packets long
collect ipv4 source mask
collect ipv4 destination mask
collect ipv4 source prefix
collect ipv4 destination prefix
collect timestamp sys-uptime first
collect timestamp sys-uptime last
 

flow exporter NFAexporter

destination 10.200.253.79
source Loopback0
transport udp 9996
template data timeout 60
option interface-table timeout 60
option application-table timeout 60

flow monitor NFAmonitor

exporter NFAexporter
record NFArecord
cache timeout active 60

一旦执行了配置中的改变, 请应用 Flow 监视 "ip flow monitor NFAmonitor input" 到全部的三层接口以便得到准确的流量数据.

请参考下面链接来配置 Ezpm:

Steps to enable AVC in Cisco IOS and IOS XE routers