We are looking at deploying NetFlow in a service provider environment to our MPLS (IP VPN & VPLS) customers. However since all of our customers use RFC 1918 private address space there is almost certain to be IP address overlap. In the IP-VPN world we can force the customers to use unique IP addresses but in the VPLS world it is a layer 2 service and we cannot really force them to change their IP addressing scheme to accomodate us.
But I'm not sure what type of overlap matters - you can set the source interface for NetFlow, which effectively sets the NetFlow record source IP to any address you like (regardless of the actual WAN interface IP or management IP) as long as you have an extra interface available, right?
Also, does anyone know how the router actually routes outbound NetFlow packets? Do they have to go out over the source interface or is it possible to assign them to that interface (to get that IP) but force them to go out a different port?
Thanks!
