Настроено SLA+NAT, переключение с канала на канал работает.
Необходимо настроить NETFLOW для корректного подсчета трафика по натовым адресам.
Подскажите, пожалуйста, как это сделать в моем случае.
!
!
ip sla 1
icmp-echo 213.180.204.8 source-interface FastEthernet0
timeout 1000
threshold 40
frequency 3
!
ip sla schedule 1 life forever start-time now
!
ip sla 2
icmp-echo 81.19.70.3 source-interface FastEthernet1
timeout 1000
threshold 40
frequency 3
!
ip sla schedule 2 life forever start-time now
!
!
track 100 rtr 1 reachability
delay down 15 up 10
!
track 200 rtr 2 reachability
delay down 15 up 10
!
!
interface FastEthernet0
ip address 172.16.101.60 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip policy route-map ISP0
duplex auto
speed auto
!
!
interface FastEthernet1
ip address 10.5.5.2 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip policy route-map ISP1
duplex auto
speed auto
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 2$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
ip route 0.0.0.0 0.0.0.0 172.16.0.1 track 100
ip route 0.0.0.0 0.0.0.0 10.5.5.1 2 track 200
!
ip route 81.19.70.3 255.255.255.255 10.5.5.1
ip route 213.180.204.8 255.255.255.255 172.16.0.1
!
ip nat inside source route-map ISP0 interface FastEthernet0 overload
ip nat inside source route-map ISP1 interface FastEthernet1 overload
!
access-list 110 permit ip 10.10.10.0 0.0.0.255 any
!
route-map ISP0 permit 10
match ip address 110
match interface FastEthernet0
!
route-map ISP1 permit 10
match ip address 110
match interface FastEthernet1
!