Имеем:
cisco-3640#sh ver
Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3640-IO3-M), Version 12.2(32), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Fri 02-Dec-05 15:19 by
Image text-base: 0x60008930, data-base: 0x60A88000
ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
cisco-3640 uptime is 4 hours, 3 minutes
System returned to ROM by reload
System image file is "flash:c3640-io3-mz.122-32.bin"
cisco 3640 (R4700) processor (revision 0x00) with 61440K/4096K bytes of memory.
Processor board ID 21961002
R4700 CPU at 100Mhz, Implementation 33, Rev 1.0
Bridging software.
X.25 software, Version 3.0.0.
2 Ethernet/IEEE 802.3 interface(s)
1 FastEthernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Проблема, что траффик идущий через NAT не попадает в NetFlow, а именно:
04:04:36: IP: s=66.225.214.106 (Ethernet0/0), d=192.168.23.15, len 40, policy match
04:04:36: IP: route map netflow_nat, item 10, permit
04:04:36: IP: s=66.225.214.106 (Ethernet0/0), d=192.168.23.15 (Loopback0), len 40, policy routed
04:04:36: IP: Ethernet0/0 to Loopback0 192.168.23.15
а cisco-3640#sh ip cache flow | include 66.225.214.106
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 100C 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 100F 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 1008 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 1007 3
Et0/1 192.168.23.15 Et0/0 66.225.214.106 06 0F57 22B8 22
Et0/0 66.225.214.106 Null 192.168.23.15 06 22B8 0F57 25
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0EAA 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0EA6 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0EE3 6
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0EC3 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0E71 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FA9 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FBB 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F8C 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F8F 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F98 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F94 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FEF 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FE7 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FE3 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FF2 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FF3 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FCF 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FC5 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0FD4 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F1C 9
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F19 6
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F1A 4
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F6A 3
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F64 4
Et0/0 66.225.214.106 Null 192.168.23.15 06 0050 0F7F 3
т.е. с помощью route-map я его перенаправил на интерфейс loopback, а он всеравно не попадает в netflow...