Re: if flow-export source f0/0

From: shiran guez <shiranp3_at_gmail.com>
Date: Fri, 26 Feb 2010 11:27:00 +0200

It will go out of the primary source ip address even if the collector
is in the secondary subnet.
!
ip flow-export source Vlan16
ip flow-export version 5
ip flow-export destination 172.16.1.10 9666
!
interface Vlan16
  ip address 172.16.1.1 255.255.255.0 secondary
 ip address 192.168.10.254 255.255.255.0
!

Feb 26 09:24:02.483: IP: tableid=0, s=192.168.10.254 (local),
d=172.16.1.10 (Vlan16), routed via RIB
Feb 26 09:24:02.483: IP: s=192.168.10.254 (local), d=172.16.1.10
(Vlan16), g=172.16.1.10, len 1252, forward
Feb 26 09:24:02.483: UDP src=53699, dst=9666

Note: you can test it your self without haing a collector, simply
prepare extended ACL to match the flow and apply it to a "debug ip
packet detail <acl>" or you can direct the flow to your pc and watch
it via wireshark or any other packet sniffer

On Fri, Feb 26, 2010 at 3:36 AM, De Guzman, Angelo
<a.deguzman_at_ph.fujitsu.com> wrote:
> Hi Group,
>
> Here is my config.
>
> !
>
> Ip flow-export source interface fastethernet0/0
>
> !
>
> Interface fastethernet0/0
>
> Ip address 192.168.1.1 255.255.255.0
>
> Ip address 172.16.1.1 255.255.255.0 secondary
>
>
>
>
>
> Which source ip address will be used by the router to send netflow
> datagrams to the Netflow Collector? Don't have actual NFC to test this.
>
>
>
> Thanks,
>
> Angelo
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Shiran Guez
MCSE CCNP NCE1 JNCIA-ER CCIE #20572
http://cciep3.blogspot.com
http://www.linkedin.com/in/cciep3
http://twitter.com/cciep3
Blogs and organic groups at http://www.ccie.net
Received on Fri Feb 26 2010 - 11:27:00 ART

This archive was generated by hypermail 2.2.0 : Mon Mar 01 2010 - 06:28:36 ART