monitor the Internet activity

[Ibrahim Jamil]

Hi Experts

How can i monitor the Internet activity in my network so see the users performs heavy download , in fact  the Internet utilization on my link all time are full; we have asa 5510 perform NAT along with 2600 router as gateway connect us to the isp

Pls Help

thanks

Jamil

[cadet alain]

Hi,

you can use Netflow:

http://www.cisco.com/en/US/docs/ios/netflow/configuration/guide/15_0/nf_15_0_book.html

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_nsel.html

Regards.

Alain.

Don't forget to rate helpful posts.

[Ibrahim Jamil]

Hi

where should i configure this? on Internet router f0/0  connected to isp?

thanks

[sean_evershed]

In the past based on the document below I have configured Netflow on the inside interface of the Internet router. This is the interface that connects your router to your switch.

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/prod_white_paper0900aecd80406232.html

[Ibrahim Jamil]

Hi Sean

my inside interface or my router(Public IP) connected to outside interface of cisco asa(outside interface Public ip)

outside interface of my router connected to isp,

pls help me to acheive with  the config as per the above topology

thanks

jamil

[Rick Morris]

Here is a link to configure netflow

http://www.cisco.com/en/US/docs/ios/12_1/switch/configuration/guide/xcdnfc.html

Place this on the router not the ASA.  The flow will then be applied to the exit interface on the router that is connected to the ASA.  Then any traffic outbound through the ASA will be cached and data collected for netflow

[Ibrahim Jamil]

Hi Rick

do u mean on router inside interface wich have a Public IP ?

do u have a video on somewhere else to master this stuff?

thanks

[Rick Morris]

You would apply this to the interface connected to your internet segment

http://www.youtube.com/watch?v=jf3ZKTU3l68

This will walk you through a set-up and where.

If you have a Ethernet handoff from the ISP then you will apply to the Ethernet interface connected there.  You would not do any inside interface.  This is for WAN, not to assume that you cannot do netflow on your LAN.

[Ibrahim Jamil]

thanks rick