Cisco ASA Series

1-6
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring NetFlow Secure Event Logging (NSEL)
Configuring NSEL
match access-list flow_export_acl
Example:
hostname (config-cmap)# match access-list
flow_export_acl
Configures the access list to match specific traffic.
The flow_export_acl argument is the name of the
access list.
match any
Example:
hostname (config-cmap)# match any
Matches any traffic.
Step 3
policy-map flow_export_policy
Example:
hostname(config)# policy-map flow_export_policy
Defines the policy map to apply flow-export actions
to the defined classes. The flow_export_policy
argument is the name of the policy map.
If you create a new policy map and apply it globally
according to Step 6, the remaining inspection policies
are deactivated.
Alternatively, to insert a NetFlow class in the existing
policy, enter the class flow_export_class command
after the policy-map global_policy command.
For more information about creating or modifying
the Modular Policy Framework, see Chapter 1,
“Configuring a Service Policy Using the Modular
Policy Framework.”
Step 4
class flow_export_class
Example:
hostname (config-pmap)# class flow_export_class
Defines the class to apply flow-export actions. The
flow_export_class argument is the name of the class.
Step 5
flow-export event-type event-type destination
flow_export_host1 [flow_export_host2]
Example:
hostname (config-pmap-c)# flow-export event-type all
destination 209.165.200.230
Configures a flow-export action. The event_type
keyword is the name of the supported event being
filtered. The flow_export_host argument is the IP
address of a host. The destination keyword is the IP
address of the configured collector.
Step 6
service-policy flow_export_policy global
Example:
hostname (config)# service-policy flow_export_policy
global
Adds or edits the service policy globally. The
flow_export_policy argument is the name of the
policy map.
Command Purpose