Имеется такая статья на сайте Нетапа, в принципе всё понятно, только одного не могу понять что за интерфейс Loopback0
interface Loopback0
ip address 192.168.10.1 255.255.255.0
ip route-cache policy
ip route-cache flow
и потом он используется здесь
route-map MAP permit 10
match ip address 108
set interface Loopback0 Ethernet1/1
вопрос: какой айпи адрес прописывается в этом интерфейсе, взятый с потолка или он к чему то привязывается.
Cбор статистики по протоколу NetFlow с маршрутизатора Cisco
-
mikkey finn
- Сообщения: 1612
- Зарегистрирован: Пт ноя 10, 2006 15:23
-
mikkey finn
- Сообщения: 1612
- Зарегистрирован: Пт ноя 10, 2006 15:23
-
Chrst
- Сообщения: 370
- Зарегистрирован: Пт май 11, 2007 09:28
- Откуда: Медиахолдинг "ЛеККС"
- Контактная информация:
Loopback - виртуальный интерфейс, какой IP ты ему нарежешь сугубо без разницы. Он участвует в процессе сбора статистики и необходим ввиду особенностей сбора статистики с кисок (на вход интерфейса). Возьми из диапазона своих пользовательских сетей. Он, loopback, кстати еще вяжется с виртуал-темплейтом, на котором клиенты авторизуются.scazenec писал(а):ну а что в доке написано: Интерфейс, на который производится перенаправление пакетов после обратного преобразования.? и какой ему присвоить апи,
Но Chris прав, хотя конечно возможно слишком резок и критичен
. Кстати его "пожелание" (CCNA) очень даже желательно, а не то чтобы "не мешало бы знать".Привет. Ну если уж соседи, то "заходи" в гости как нибудь. Пообщаемся. Думаю будет не без интересно.scazenec писал(а):Кстати Chrst, привет мы с тобой соседи, я из Пятигорска (Тивиком), тоже юзаем эту штуковину под названием НетАп
у меня такой конфиг циски, мне необходимо собирать статистику с внешних 75.70.208.0 0.0.0.127 и внутренних
192.168.168.0 0.0.0.255, айпишников з этих пулов выдаются адреса впн клиентам
hostname vpn
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
!
aaa new-model
!
!
aaa group server radius vpn
server-private биллинг auth-port 1812 acct-port 1813 retransmit 2 key 7 03550958525A771B1650
!
aaa authentication login default local
aaa authentication ppp default group vpn
aaa authorization exec default local if-authenticated
aaa authorization network default group vpn
aaa accounting update periodic 3
aaa accounting network default start-stop group vpn
!
aaa session-id common
clock timezone PCTime 3
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 172.31.0.1 172.31.0.254
!
ip dhcp pool USERS
network 172.31.0.0 255.255.0.0
default-router 172.31.0.1
domain-name net.local
!
!
no ip bootp server
no ip domain lookup
i
ip name-server 72.52.8.2
vpdn enable
vpdn logging
vpdn logging user
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 3
!
!
async-bootp dns-server 72.52.8.2
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
!
bba-group pppoe global
virtual-template 1
ac name tvcom
sessions per-mac limit 1
sessions per-mac throttle 100 30 3600
sessions auto cleanup
!
!
interface Loopback0
ip address 192.168.0.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface Loopback1
ip address 192.168.168.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.301
description Service network
encapsulation dot1Q 301
ip address 192.168.1.20 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface GigabitEthernet0/1.416
description PPPoE clients
encapsulation dot1Q 416
ip address 172.31.0.1 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
pppoe enable group global
no cdp enable
!
interface GigabitEthernet0/1.525
description traffic
encapsulation dot1Q 525
ip address 72.52.9.70 255.255.255.252
ip nat outside
ip virtual-reassembly
ip policy route-map traffic
no cdp enable
!
interface GigabitEthernet0/1.526
description unlim
encapsulation dot1Q 526
ip address 72.52.9.74 255.255.255.252
ip virtual-reassembly
ip policy route-map unlim
no cdp enable
!
interface Virtual-Template1
description pppoe
ip unnumbered GigabitEthernet0/1.526
peer default ip address pool dialin
ppp authentication chap
ppp timeout idle 1800
!
interface Virtual-Template3
ip unnumbered GigabitEthernet0/1.525
ip nat inside
ip virtual-reassembly
ip route-cache policy
ip route-cache flow
ip tcp header-compression
peer default ip address pool pptp2
ppp authentication ms-chap ms-chap-v2
!
ip local pool dialin 75.70.208.128 75.70.208.254
ip local pool pptp2 192.168.168.2 192.168.168.254
ip route 0.0.0.0 0.0.0.0 72.52.9.69
ip route 0.0.0.0 0.0.0.0 72.52.9.73
!
ip flow-export source GigabitEthernet0/1.525
ip flow-export version 5
ip flow-export destination биллинг 9996
!
no ip http server
no ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 5 interface GigabitEthernet0/1.525 overload
ip nat inside source list 10 interface GigabitEthernet0/1.525 overload
!
ip access-list standard traffic
permit 72.52.9.68 0.0.0.3
permit 75.70.208.0 0.0.0.127
ip access-list standard unlim
permit 75.52.9.72 0.0.0.3
permit 75.70.208.128 0.0.0.127
!
logging trap debugging
access-list 10 permit 192.168.168.0 0.0.0.255
access-list 109 permit ip any 192.168.168.0 0.0.0.255
!
route-map traffic permit 10
match ip address traffic
set ip next-hop 72.52.9.69
!
route-map unlim permit 10
match ip address unlim
set ip next-hop 72.52.9.73
!
route-map NETUP_MAP permit 10
match ip address 108 109
set interface Loopback0 GigabitEthernet0/1.525 Virtual-Template3
!
!
!просмотр
vpn#sh ip cache flow
IP packet size distribution (718698696 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .458 .052 .041 .048 .006 .003 .002 .002 .003 .002 .003 .002 .002 .002
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.001 .001 .115 .010 .235 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
8 active, 4088 inactive, 35252276 added
518558126 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 21640 bytes
8 active, 1016 inactive, 35127141 added, 35127141 added to flow
0 alloc failures, 360 force free
1 chunk, 284 chunks added
last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 6257 0.0 21 63 0.1 0.2 15.3
TCP-FTP 29594 0.0 7 78 0.2 2.9 5.2
TCP-FTPD 3067 0.0 791 1369 2.8 221.7 11.1
TCP-WWW 6599622 7.6 17 1043 134.9 4.7 5.4
TCP-SMTP 1970858 2.2 7 81 16.6 3.4 3.6
TCP-X 9264 0.0 19 40 0.2 0.1 15.0
TCP-BGP 2 0.0 1 44 0.0 0.0 15.6
TCP-NNTP 107 0.0 392 94 0.0 588.2 4.5
TCP-Frag 21 0.0 25 379 0.0 3.7 14.7
TCP-other 12281846 14.2 37 414 537.0 8.6 11.5
UDP-DNS 343220 0.3 4 64 1.6 8.4 15.7
UDP-NTP 819 0.0 1 80 0.0 0.1 15.6
UDP-TFTP 58 0.0 4 152 0.0 0.7 15.5
UDP-Frag 4935 0.0 30 971 0.1 1.9 15.6
UDP-other 13485329 15.6 7 133 123.6 1.0 15.6
ICMP 454310 0.5 16 59 8.5 4.6 15.6
IPv6INIP 60403 0.0 25 519 1.7 13.2 15.5
GRE 2033 0.0 3690 207 8.7 865.8 11.3
IP-other 28 0.0 1 124 0.0 0.0 15.6
Total: 35251773 41.0 20 464 836.5 4.7 11.6
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Vi82 75.70.208.35 Gi0/1.526 77.88.21.90 06 0DE8 0050 5
Vi82 75.70.208.35 Gi0/1.526 77.88.21.90 06 0DEA 0050 4
Vi82 75.70.208.35 Gi0/1.526 89.111.188.91 06 0DBA 0050 7
Vi82 75.70.208.35 Gi0/1.526 64.12.164.24 06 0E1C 0050 4
Vi82 75.70.208.35 Gi0/1.526 89.111.188.91 06 0DCE 0050 4
Vi82 75.70.208.35 Gi0/1.526 90.156.153.114 06 0E0E 0050 35
Vi82 75.70.208.35 Gi0/1.525 93.158.134.190 06 0E10 0050 4
Vi24 75.70.208.31 Gi0/1.526 212.57.150.242 06 04EF 0050 76
Vi24 75.70.208.31 Gi0/1.526 212.57.150.242 06 04EE 0050 234
Vi82 75.70.208.35 Gi0/1.526 217.73.200.222 06 0E14 0050 6
Vi44 192.168.168.2 Gi0/1.525 81.19.70.1 06 0468 0050 26
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0476 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0472 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0470 0050 2
Vi44 192.168.168.2 Gi0/1.526 217.73.200.221 06 046C 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.19 06 046E 0050 2
Vi44 192.168.168.2 Null 92.42.8.2 11 0434 0035 1
192.168.168.0 0.0.0.255, айпишников з этих пулов выдаются адреса впн клиентам
hostname vpn
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
!
aaa new-model
!
!
aaa group server radius vpn
server-private биллинг auth-port 1812 acct-port 1813 retransmit 2 key 7 03550958525A771B1650
!
aaa authentication login default local
aaa authentication ppp default group vpn
aaa authorization exec default local if-authenticated
aaa authorization network default group vpn
aaa accounting update periodic 3
aaa accounting network default start-stop group vpn
!
aaa session-id common
clock timezone PCTime 3
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 172.31.0.1 172.31.0.254
!
ip dhcp pool USERS
network 172.31.0.0 255.255.0.0
default-router 172.31.0.1
domain-name net.local
!
!
no ip bootp server
no ip domain lookup
i
ip name-server 72.52.8.2
vpdn enable
vpdn logging
vpdn logging user
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 3
!
!
async-bootp dns-server 72.52.8.2
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
!
bba-group pppoe global
virtual-template 1
ac name tvcom
sessions per-mac limit 1
sessions per-mac throttle 100 30 3600
sessions auto cleanup
!
!
interface Loopback0
ip address 192.168.0.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface Loopback1
ip address 192.168.168.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.301
description Service network
encapsulation dot1Q 301
ip address 192.168.1.20 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface GigabitEthernet0/1.416
description PPPoE clients
encapsulation dot1Q 416
ip address 172.31.0.1 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
pppoe enable group global
no cdp enable
!
interface GigabitEthernet0/1.525
description traffic
encapsulation dot1Q 525
ip address 72.52.9.70 255.255.255.252
ip nat outside
ip virtual-reassembly
ip policy route-map traffic
no cdp enable
!
interface GigabitEthernet0/1.526
description unlim
encapsulation dot1Q 526
ip address 72.52.9.74 255.255.255.252
ip virtual-reassembly
ip policy route-map unlim
no cdp enable
!
interface Virtual-Template1
description pppoe
ip unnumbered GigabitEthernet0/1.526
peer default ip address pool dialin
ppp authentication chap
ppp timeout idle 1800
!
interface Virtual-Template3
ip unnumbered GigabitEthernet0/1.525
ip nat inside
ip virtual-reassembly
ip route-cache policy
ip route-cache flow
ip tcp header-compression
peer default ip address pool pptp2
ppp authentication ms-chap ms-chap-v2
!
ip local pool dialin 75.70.208.128 75.70.208.254
ip local pool pptp2 192.168.168.2 192.168.168.254
ip route 0.0.0.0 0.0.0.0 72.52.9.69
ip route 0.0.0.0 0.0.0.0 72.52.9.73
!
ip flow-export source GigabitEthernet0/1.525
ip flow-export version 5
ip flow-export destination биллинг 9996
!
no ip http server
no ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 5 interface GigabitEthernet0/1.525 overload
ip nat inside source list 10 interface GigabitEthernet0/1.525 overload
!
ip access-list standard traffic
permit 72.52.9.68 0.0.0.3
permit 75.70.208.0 0.0.0.127
ip access-list standard unlim
permit 75.52.9.72 0.0.0.3
permit 75.70.208.128 0.0.0.127
!
logging trap debugging
access-list 10 permit 192.168.168.0 0.0.0.255
access-list 109 permit ip any 192.168.168.0 0.0.0.255
!
route-map traffic permit 10
match ip address traffic
set ip next-hop 72.52.9.69
!
route-map unlim permit 10
match ip address unlim
set ip next-hop 72.52.9.73
!
route-map NETUP_MAP permit 10
match ip address 108 109
set interface Loopback0 GigabitEthernet0/1.525 Virtual-Template3
!
!
!просмотр
vpn#sh ip cache flow
IP packet size distribution (718698696 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .458 .052 .041 .048 .006 .003 .002 .002 .003 .002 .003 .002 .002 .002
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.001 .001 .115 .010 .235 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
8 active, 4088 inactive, 35252276 added
518558126 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 21640 bytes
8 active, 1016 inactive, 35127141 added, 35127141 added to flow
0 alloc failures, 360 force free
1 chunk, 284 chunks added
last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 6257 0.0 21 63 0.1 0.2 15.3
TCP-FTP 29594 0.0 7 78 0.2 2.9 5.2
TCP-FTPD 3067 0.0 791 1369 2.8 221.7 11.1
TCP-WWW 6599622 7.6 17 1043 134.9 4.7 5.4
TCP-SMTP 1970858 2.2 7 81 16.6 3.4 3.6
TCP-X 9264 0.0 19 40 0.2 0.1 15.0
TCP-BGP 2 0.0 1 44 0.0 0.0 15.6
TCP-NNTP 107 0.0 392 94 0.0 588.2 4.5
TCP-Frag 21 0.0 25 379 0.0 3.7 14.7
TCP-other 12281846 14.2 37 414 537.0 8.6 11.5
UDP-DNS 343220 0.3 4 64 1.6 8.4 15.7
UDP-NTP 819 0.0 1 80 0.0 0.1 15.6
UDP-TFTP 58 0.0 4 152 0.0 0.7 15.5
UDP-Frag 4935 0.0 30 971 0.1 1.9 15.6
UDP-other 13485329 15.6 7 133 123.6 1.0 15.6
ICMP 454310 0.5 16 59 8.5 4.6 15.6
IPv6INIP 60403 0.0 25 519 1.7 13.2 15.5
GRE 2033 0.0 3690 207 8.7 865.8 11.3
IP-other 28 0.0 1 124 0.0 0.0 15.6
Total: 35251773 41.0 20 464 836.5 4.7 11.6
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Vi82 75.70.208.35 Gi0/1.526 77.88.21.90 06 0DE8 0050 5
Vi82 75.70.208.35 Gi0/1.526 77.88.21.90 06 0DEA 0050 4
Vi82 75.70.208.35 Gi0/1.526 89.111.188.91 06 0DBA 0050 7
Vi82 75.70.208.35 Gi0/1.526 64.12.164.24 06 0E1C 0050 4
Vi82 75.70.208.35 Gi0/1.526 89.111.188.91 06 0DCE 0050 4
Vi82 75.70.208.35 Gi0/1.526 90.156.153.114 06 0E0E 0050 35
Vi82 75.70.208.35 Gi0/1.525 93.158.134.190 06 0E10 0050 4
Vi24 75.70.208.31 Gi0/1.526 212.57.150.242 06 04EF 0050 76
Vi24 75.70.208.31 Gi0/1.526 212.57.150.242 06 04EE 0050 234
Vi82 75.70.208.35 Gi0/1.526 217.73.200.222 06 0E14 0050 6
Vi44 192.168.168.2 Gi0/1.525 81.19.70.1 06 0468 0050 26
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0476 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0472 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.180 06 0470 0050 2
Vi44 192.168.168.2 Gi0/1.526 217.73.200.221 06 046C 0050 2
Vi44 192.168.168.2 Gi0/1.526 81.19.66.19 06 046E 0050 2
Vi44 192.168.168.2 Null 92.42.8.2 11 0434 0035 1