Monitoring Traffic on a Router with a VRF Instance and a Monitoring Group
The first way you can implement passive flow monitoring is to direct traffic into a VRF routing instance and use a monitoring group to export this traffic to a flow server for analysis. Complete the following tasks:
Specifying a Firewall Filter on an M, MX or T Series Router to Select Traffic to Monitor
Establishing a VRF Instance on an M, MX or T Series Router for Monitored Traffic
Configuring a Monitoring Group on an M, MX or T Series Router to Send Traffic to the Flow Server
Stripping MPLS Labels on ATM, Ethernet-Based and SONET/SDH Router Interfaces