[c-nsp] asr1001x nat logging
dmitry at zhigulinet.ru
dmitry at zhigulinet.ru
Thu Dec 10 03:06:01 EST 2015
Hello, Cisco-nsp..
On my cisco asr1001x not work nat logging.
What could be the problem?
Netflow v5 work.
I do not see traffic on collector with tcpdump.
I tryning soft:
System image file is "bootflash:/asr1001x-universalk9.03.12.01.S.154-2.S1-std.SPA.bin"
System image file is "bootflash:/asr1001x-universalk9.03.15.00.S.155-2.S-std.SPA.bin"
interface TenGigabitEthernet0/0/0
description Downlink-to-X670
ip address 10.254.253.18 255.255.255.252
no ip redirects
no ip unreachables
ip nat inside
ip flow monitor flow_v5 input
ip flow monitor flow_v5 output
service-policy type control CTRL-IPOE
ip subscriber routed
initiator unclassified ip-address
end
ip nat settings mode cgn
no ip nat settings support mapping outside
ip nat settings pap limit 60
ip nat log translations flow-export v9 udp destination 10.0.0.122 9995 source TenGigabitEthernet0/0/0
ip nat log translations flow-export v9 vrf 0 on
ip nat translation timeout 300
ip nat translation tcp-timeout 1800
ip nat translation pptp-timeout 1800
ip nat translation udp-timeout 60
ip nat translation finrst-timeout 10
ip nat translation syn-timeout 10
ip nat translation dns-timeout 10
ip nat translation icmp-timeout 10
ip nat translation port-timeout tcp 80 360
ip nat translation port-timeout tcp 8080 360
ip nat translation port-timeout tcp 1600 180
ip nat translation port-timeout tcp 110 180
ip nat translation port-timeout tcp 25 180
ip nat translation max-entries all-host 2000
ip nat pool NAT_POOL_18.19.142 18.19.142.0 18.19.142.254 netmask 255.255.255.0
ip nat inside source list ACL_NAT_18.19.142 pool NAT_POOL_18.19.142 overload
flow exporter carbon4_v5
destination 172.1.1.2
transport udp 9996
export-protocol netflow-v5
!
!
flow monitor flow_v5
exporter carbon4_v5
cache timeout inactive 10
cache timeout active 1000
record netflow-original
--
С уважением,
Dmitry mailto:dmitry at zhigulinet.ru
More information about the cisco-nsp
mailing list