在Vyatta路由器上配置NetFlow

 

在Vyatta上配置NetFlow非常简单:

1. 首先,我们设置NetFlow版本。

set system flow-accounting netflow version 9

 

2. 要将流导出至安装了NetFlow报告工具的收集器,我们需要设置流目的地。流目的地是NetFlow收集器和监听端口的IP地址。

set system flow-accounting netflow server <NFA server IP> port <Port #>

如:set system flow-accounting netflow server 192.168.0.1 port 9996

 

3. 然后,我们为您要监控的每个接口下发以下命令:

set system flow-accounting interface <interface name>

如:set system flow-accounting interface eth0

 

4. 由于我们的NetFlow和sFlow Analyzer每分钟都要获取流量,因此请确保将活动流超时时间设置为1分钟。默认情况下,此值已设置为1分钟或60秒。

set system flow-accounting netflow timeout expiry-interval 60

 

5. 在对所有接收到的数据包的收集统计信息时,Vyatta流核算可能会占用大量资源。另一种方法是采样,即从每N个数据包中采集1个数据包,N是采样率。

set system flow-accounting netflow sampling-rate N

如:set system flow-accounting netflow sampling-rate 500

 

6. 最后,以下命令将设置其他必要的Vyatta流核算参数:

set system flow-accounting netflow engine-id  id (id values range between 0 – 255)
set system flow-accounting netflow timeout max-active-life 604800
set system flow-accounting netflow timeout flow-generic 3600
set system flow-accounting netflow timeout tcp-fin 300
set system flow-accounting netflow timeout tcp-generic 3600
set system flow-accounting netflow timeout tcp-rst 120
set system flow-accounting netflow timeout icmp 300
set system flow-accounting netflow timeout udp 300

 

更多信息请参考下方链接:

https://blogs.manageengine.com/network/netflowanalyzer/2012/02/02/netflow-configuration-for-vyatta-router.html

 

Back to Top