Monitor WAN Interface with ingress and egress on same-interface

Monitor WAN Interface with ingress and egress on same-interface

Hi:

Below is the scenerio:

  WAN1   WAN2
      I            I
      I            I
    R1 <-->  R2
      I            I
      I            I
   LAN1    LAN2

We have 2 internet routers, each router has a WAN, LAN, and cross-over between the routers.  I am currently using Netflow v5 and "ip flow ingress" on only the the WAN and LAN interface to monitor traffic.  I am specifically not using "ip flow ingress" on the cross-over between routers, so traffic isn't counted twice when generating reports using IP Groups to capture total traffic across both routers. Traffic routes over the cross-over based on best path.

However, the BGP AS stats are not correct for router 2 since all outbound traffic comes in on R1's LAN1 interface which is monitored.  So, looking at BGP stats for R2, they don't looks correct for outbound.  I'm wondering if there is also other traffic I'm missing in this scenario.

In this scenario, is this the optimal configuration?  Can I simply just use both ingress and egress on the WAN interfaces and nothing on the other interfaces?  From what I understand, Netflow v9 supports this (of course with the added impact of generating templates regularly).  After reading other comments on this forum, it doesn't seem like it is recommend and only to use "ip flow ingress".

Any clarification would be great,

Thanks,
Patrick





















                New to ADSelfService Plus?