我有一个我们网络的核心交换机(骨干网),它将所有 vlan 广播到其他交换机。我正在尝试在交换机上配置 netflow 并将其链接到 PRTG 上的 Netflow 传感器。
出于某种原因,当我确实显示流量导出统计信息时,显示“0”,好像没有任何内容被导出!
这是我的堆叠核心交换机类型:C3750X,IOS 版本 15.2(4)E5,许可级别:ipservices,sdm:“桌面路由”
这是我用来在交换机上获取 netflow 的配置,(我尝试使用 v9 但同样的问题,下面是 v5):
flow record PRTG-FLOW-RECORD
description Record-Network-Traffic
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
!
flow exporter PRTG-EXPORTERv5
description Export-Flow-to-PRTG
destination 10.7.7.200
source Vlan7
transport udp 9997
export-protocol netflow-v5
!
!
flow monitor PRTG-MONITOR
description Monitor-PRTG-Flow
exporter PRTG-EXPORTERv5
cache timeout active 60
record PRTG-FLOW-RECORD
!
!
sampler PRTG-SAMPLER
mode random 1 out-of 32
当我确实显示出口商统计信息时:
Flow Exporter PRTG-EXPORTERv5:
Packet send statistics (last cleared 05:45:07 ago):
Successfully sent: 0 (0 bytes)
Client send statistics:
Client: Flow Monitor PRTG-MONITOR
Records added: 0
Bytes added: 0
当我确实显示流量导出器时:
Flow Exporter PRTG-EXPORTERv5:
Description: Export-Flow-to-PRTG
Export protocol: NetFlow Version 5
Transport Configuration:
Destination IP address: 10.7.7.200
Source IP address: 10.7.7.1
Source Interface: Vlan7
Transport Protocol: UDP
Destination Port: 9997
Source Port: 49747
DSCP: 0x0
TTL: 255
Output Features: Not Used
当我确实显示流量监视器时:
Flow Monitor PRTG-MONITOR:
Description: Monitor-PRTG-Flow
Flow Record: PRTG-FLOW-RECORD
Flow Exporter: PRTG-EXPORTERv5
Cache:
Type: normal
Status: allocated
Size: 128 entries / 6660 bytes
Cache:
Type: normal (Platform cache)
Status: allocated
Size: Unknown
Timers:
Local Global
Inactive Timeout: 15 secs
Active Timeout: 60 secs 1800 secs
Update Timeout: 1800 secs
Synchronized Timeout: 600 secs
我在接口 VLAN 下应用这两个命令:
ip flow monitor PRTG-MONITOR sampler PRTG-SAMPLER input
ip flow monitor PRTG-MONITOR sampler PRTG-SAMPLER output
出于某种原因,如果我在千兆接口下应用它,我会感到困惑:
Error: Flexible Net Flow is not supported on this interface
我的9997端口下的PRTG服务器是打开的,我确定了!它只是没有收到任何 netflow 数据
我将不胜感激在这个级别的任何帮助!