TechLibrary

Navigation Back up to About Overview

Configuring Discard Accounting

On routing platforms containing a Monitoring Services PIC or an Adaptive Services PIC, you can configure accounting for traffic passing through the routing platform.

To configure discard accounting, include the accounting group group-name statement at the [edit forwarding-options] hierarchy level:

[edit forwarding-options]accounting group-name {output {cflowd [ hostnames ] {aggregation {autonomous-system;destination-prefix;protocol-port;source-destination-prefix {caida-compliant;}source-prefix;}autonomous-system-type (origin | peer);port port-number;version format;}flow-active-timeout seconds;flow-inactive-timeout seconds;interface {engine-id number;engine-type number;source-address address;}}}

To configure the output flow aggregation, include the cflowd statement. For more information about flow aggregation, see Configuring Flow Aggregation (cflowd). To configure the interval before exporting an active flow, include the flow-active-timeout statement. The default value for flow-active-timeout is 1800 seconds. To configure the interval before a flow is considered inactive, include the flow-inactive-timeout statement. The default value for flow-inactive-timeout is 60 seconds. To configure the interface that sends out monitored information, include the interface statement. Discard accounting is supported for the Monitoring Services PIC only.

When you apply a firewall filter to a loopback interface, the filter might block responses from the Monitoring Services PIC. To allow responses from the Monitoring Services PIC to pass through for accounting purposes, configure a term in the firewall filter to include the Monitoring Services PIC IP address. For more detailed information about configuring firewall filters, see Guidelines for Configuring Standard Firewall Filters and Guidelines for Applying Standard Firewall Filters.

You can use discard accounting for passive and active flow monitoring.

Published: 2011-07-29