配置Cisco ISR 4321系列设备

match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match application name
match interface input 
collect interface output
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow exporter NFAexporter
destination {NFA ServerIP address}
source {Any L3 interface of the device or Loopback interface}
transport udp 9996
template data timeout 60 

option interface-table timeout 60
option application-table timeout 60

 
flow monitor NFAmonitor
exporter NFAexporter
cache timeout active 60
record NFArecord

​

请在设备的所有L3接口中配置以下命令并检查：

ip flow monitor NFAmonitor input