в IOS тока начинаю разбираться, сечас трафик считается через loopback, ткнули носом в новую фичу ip flow ingress, подскажите что надо подправить в конфиге?

version 12.4
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
service internal
!
hostname gatew
!
boot-start-marker
boot-end-marker
!
logging buffered 4096
!
aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization exec default local
aaa authorization network vpnuser1 local
!
!
aaa session-id common
memory-size iomem 15
clock timezone GMT+3 3
clock summer-time GMT+3 recurring last Sun Mar 2:00 last Sun Oct 3:00
no ip source-route
!
!
ip cef
!
!
no ip bootp server
ip domain name domain.ru
ip name-server xxx.xxx.xxx.xxx
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
interface Loopback0
ip address 192.168.10.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface FastEthernet0/0
description connected to LAN
ip address yyy.yyy.yyy.yyy 255.255.255.0
ip access-group LAN_Firewall in
ip nat inside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
description connected to INTERNET
ip address xxx.xxx.xxx.xxx 255.255.255.128
ip access-group Inet_Firewall in
ip nat outside
ip virtual-reassembly
ip route-cache policy
ip route-cache flow
ip policy route-map MAP
duplex auto
speed auto
no cdp enable
!
ip route 0.0.0.0 0.0.0.0 zzz.zzz.zzz.zzz
ip route 192.168.0.0 255.255.0.0 192.168.0.101
!
ip flow-cache timeout inactive 60
ip flow-cache timeout active 10
ip flow-export version 5
ip flow-export destination 192.168.1.11 20001
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
ip access-list extended Inet_Firewall
remark internalPorts
permit tcp any any eq 22 log-input
remark allowALL
permit ip any any
ip access-list extended LAN_Firewall
remark FullAccess
permit tcp host 192.168.0.6 any
permit tcp host 192.168.1.11 any
permit icmp 192.168.0.0 0.0.255.255 any
!
access-list 1 permit 192.168.0.100
access-list 1 permit 192.168.0.6
access-list 101 permit ip any 192.168.0.0 0.0.255.255
no cdp run
!
!
!
route-map MAP permit 10
match ip address 101
set interface Loopback0
!
!