Configuring the Control Source

You configure information about the control source, including allowed source addresses and destinations and authentication key values. To configure the control source information, include the control-source statement at the [edit services dynamic-flow-capture capture-group client-name] hierarchy level:

control-source identifier {

    allowed-destinations [ destination-identifier ];

    no-syslog;

    notification-targets [ address address port port-number ];

    service-port port-number;

    shared-key value;

    source-addresses [ address ];

}

Assign the control-source statement a unique identifier. You can also include values for the following statements:

• allowed-destinations—One or more content destination identifiers to which this control source can request that matched data be sent in its control protocol requests. If you do not specify any content destinations, all available destinations are allowed.
• notification-targets—One or more destinations to which the DFC interface can log information about control protocol-related events and other events such as PIC bootup messages. You configure each notification-target entry with an IP address value and a User Datagram Protocol (UDP) port number.
• service-port—UDP port number to which the control protocol requests are directed. Control protocol requests that are not directed to this port are discarded by DFC interfaces.
• shared-key—20-byte authentication key value shared between the control source and the DFC monitoring platform.
• source-addresses—One or more allowed IP addresses from which the control source can send control protocol requests to the DFC monitoring platform. These are /32 addresses.