| Help : Configure : Example 3 |
The following configuration file provides a more complex example. In this example a border router (10.0.0.1) is connected to two backbone (10.0.1.1 and 10.0.1.2) switches. NetFlow data from the router's WAN links is sent to the probe. Traffic from the two switches' uplink ports is also being mirrored to the probe.
[probe]
host = probe.inmon.com ; change to result of "hostname" command
softwareKey = 3BC37BEF3C13E76F0003FFFFA4E46D998B7D7C3949879FCD475158E1
collectorHost = traffic.inmon.com ; name of the sFlow collector
; some settings can have default values defined at the top level
; which are then overridden for specific agents below:
samplingRate = 1000
community = private
inputPort = 5555 ; Listen for NetFlow on port 5555
; agent sending NetFlow data
[agent]
address = 10.0.0.1 ; address of the switch management agent
; Note: Only NetFlow packets from this
; agent will be accepted.
; Use iBGP to peer with Router
BGP_Peer = YES
BGP_LocalAS = 65111
[netflow]
netFlowInputASInfo = origin ; Router has been set to export origin AS
; agent sending SPAN/mirror traffic to interface eth1
[agent]
address = 10.0.1.1 ; address of the switch management agent
; Include scripts relevant to layer 2 switching
script.getArpCache.interval = 3600 ; get MAC -> ifIndex mapping
script.getVlanTable.interval = 3600 ; get ifIndex -> VLAN mapping
script.getIfTable.interval = 3600 ; get ifIndex -> MAC mapping
; Include scripts relevant to layer 3 switching
script.getRoutingTable.interval = 3600 ; get CIDR -> nextHop, protocol, ifIndex
; Get AS path information from 10.0.0.1 iBGP peering session
secondaryRoutingAgent = 10.0.0.1
[adaptor]
deviceName = eth1
mirrorDirection = both ; input and output traffic from uplink
; agent sending SPAN/mirror traffic to interface eth2
[agent]
address = 10.0.1.2 ; address of the switch management agent
; Include scripts relevant to layer 2 switching
script.getArpCache.interval = 3600 ; get MAC -> ifIndex mapping
script.getVlanTable.interval = 3600 ; get ifIndex -> VLAN mapping
script.getIfTable.interval = 3600 ; get ifIndex -> MAC mapping
; Include scripts relevant to layer 3 switching
script.getRoutingTable.interval = 3600 ; get CIDR -> nextHop, protocol, ifIndex
; Get AS path information from 10.0.0.1 iBGP peering session
secondaryRoutingAgent = 10.0.0.1
[adaptor]
deviceName = eth2
mirrorDirection = both ; input and output from uplink
Note: The router (10.0.0.1) must be configured to send NetFlow data to port 5555 on probe.inmon.com. Consult the documentation for your router for instructions on configuring NetFlow export.
Note: The switches (10.0.1.1 and 10.0.1.2) must be configured to mirror input packets to the monitor/SPAN ports connected to eth1 and eth2 respectively (see Port Mirroring).