Исходное сообщение
"Не работает связка Netflow + NAT" Отправлено ser00, 28-Фев-06 13:48
В новых IOS начиная с 12.3T(11) можно вмето всякх там извращиний и заворачиваний трафика использовать flow egress Вот рабочий конфиг моей кошки IOS c3640-jk9o3s-mz.123-14.T3.bin Current configuration : 2452 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname igate ! boot-start-marker boot-end-marker ! ! aaa new-model ! ! aaa authentication ppp default group radius aaa authorization network default group radius aaa accounting delay-start aaa accounting nested aaa accounting update newinfo aaa accounting network default start-stop group radius !         aaa session-id common ! resource policy ! clock timezone IRK 8 clock summer-time IRK recurring last Sun Mar 2:00 last Sun Oct 2:00 ip subnet-zero ip flow-egress input-interface ip flow-cache timeout inactive 60 ip flow-cache timeout active 1 ! ! ip cef no ip domain lookup ip name-server 192.168.2.10 no ip dhcp use vrf connected ! ! no ip ips deny-action ips-interface ! vpdn enable vpdn ip udp ignore checksum ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! vpdn-group 2 accept-dialin protocol pppoe virtual-template 2 ! no ftp-server write-enable ! ! ! ! ! ! ! ! ! !         ! ! ! ! ! ! no crypto isakmp ccm ! ! ! ! interface Ethernet0/0 ip address 192.168.2.20 255.255.255.0 no ip redirects full-duplex pppoe enable ! interface Ethernet0/1 ip address XXX.XXX.XXX.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip flow egress ip nat outside ip virtual-reassembly ip route-cache policy full-duplex ! interface Virtual-Template1 mtu 1460 bandwidth 1024 ip unnumbered Ethernet0/0 no ip proxy-arp ip flow ingress ip flow egress ip nat inside ip virtual-reassembly delay 200 autodetect encapsulation ppp no keepalive ppp authentication chap callin ! interface Virtual-Template2 mtu 1492 bandwidth 1024 ip unnumbered Ethernet0/0 no ip proxy-arp ip flow ingress ip flow egress ip nat inside ip virtual-reassembly delay 200 autodetect encapsulation ppp no keepalive ppp authentication pap callin ! no ip http server no ip http secure-server ip classless ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.10 ip flow-export version 5 ip flow-export destination 192.168.2.10 9996 ! ! ip nat inside source list 4 interface Ethernet0/1 overload ! access-list 4 permit 10.0.0.0 0.0.255.255 access-list 108 permit ip any 10.0.0.0 0.0.255.255 !         ! radius-server host 192.168.2.10 auth-port 1812 acct-port 1813 radius-server key ciscanasP@S ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 ! ! end