Site-to-site IPSec VPN tunnel is built between the hub datacenter and a remote site using ASA5505. The remote site ASA connects to a Cisco C2811 router and then goes to the ISP edge. The requirement is to enable Netflow on the WAN router and collect data. The Netflow Analyser (Solarwinds-Orion) resides in the hub datacenter's LAN.
Netflow Analyzer (10.1.1.10) --- (10.1.1.1)ASA1(123.1.2.1) ---- (123.1.2.2)Router1(125.5.5.5) ---->Internet< ----- (126.6.6.6)Router2(100.2.2.2)----(100.2.2.1)ASA2(10.2.1.1)---LAN
I'd like to get Netflow stats on the WAN routers between IPSec devices. And the stats need to be encrypted. In other words, I do not want to send Netflow data across the public network. My thought was to send Netflow data through the IPSec tunnel. How can I accomplish this?
