本页内容
示例：采样实例配置
您可以使用采样实例配置主动采样，并将该采样实例关联到特定的灵活端口集中器 （FPC）、模块化端口集中器 （MPC） 或密集端口集中器 （DPC）。此外，您还可以为每个采样实例定义与多个目标和协议家族关联的多个采样实例。
示例网络详细信息
以下示例显示了运行 Junos OS 9.6 版的 MX480 路由器上两个采样实例的配置。
在图 1 中，来自路由器 1 的数据包到达监控路由器的千兆以太网ge-0/1/0接口，这些数据包由服务接口sp-2/0/0采样，并通过导出接口ge-1/0/4发送到 cflowd 服务器。来自路由器 3 的数据包到达监控路由器的千兆以太网ge-3/1/0接口，服务接口sp-2/1/0对数据包进行采样，并通过导出接口ge-1/0/4发送到 cflowd 服务器。在采样过程中，从ge-0/1/0路由器 ge-1/0/0 ge-3/1/0 2 到路由器 2 的正常流量将继续保持畅通无中断。在主动流监控中，输入接口和出口接口可以是任何接口类型（例如 SONET/SDH、千兆以太网等）。
只能将一个采样实例连接到 FPC、MPC 或 DPC。可以在一个采样实例下配置多个系列。每个系列都可以拥有自己的收集器地址。您可以定义采样实例并将每个实例连接到不同的 FPC，或者可以将单个采样实例连接到所有 FPC。
此示例的采样配置包括以下内容：
两个采样实例
s0和s1， 配置为在[edit forwarding-options]层次结构级别收集采样数据。语句flow-server包括流服务器的 IP 地址、端口和模板。该interface语句包括服务接口sp-2/0/0或sp-2/1/0，用于流记录处理，以及取样接口上传入路由器的源地址。两个采样实例与 FPC 0 和 3 的绑定。这些配置与
sampling-instance层级的[edit chassis fpc slot]语句一起配置。在输入接口
ge-0/1/0ge-3/1/0上使用语句[edit interfaces interface-name unit unit-number family family]在层级激活sampling采样。
在此示例中， ping 通过 MX480 路由器在路由器 1 到路由器 2 上发出命令，以生成流量。生成数据包后， show 发出命令以验证采样配置是否按预期工作。
路由器配置示例
以下输出显示了具有两个采样实例的 MX480 路由器的配置。
user@MX480–router> show configuration
[...Output Truncated...]
}
chassis {
fpc 0 { # The fpc number is associated with the interface on which sampling is enabled, ge-0/1/0 in this statement.
sampling-instance s0;
}
fpc 3 { # The fpc number is associated with the interface on which sampling is enabled, ge-3/1/0 in this statement.
sampling-instance s1;
}
}
interfaces {
ge-0/1/0 { # This interface has sampling activated.
unit 0 {
family inet {
sampling { # Here sampling is activated.
input;
}
address 10.0.0.1/30;
}
}
}
ge-1/0/0 { # The interface on which packets are exiting the router.
unit 0 {
family inet {
address 192.0.2.1/30;
}
}
}
ge-1/0/4 { # The interface connected to the cflowd server.
unit 0 {
family inet {
address 198.51.100.1/32;
}
}
}
sp-2/0/0 { # The service interface that samples the packets from Router 1.
unit 0 {
family inet;
}
}
sp-2/1/0 { # The service interface that samples the packets from Router 3.
unit 0 {
family inet;
}
}
ge-3/1/0 { # This interface has sampling activated.
unit 0 {
family inet {
sampling { # Here sampling is activated.
input;
}
address 192.168.2.1/30;
}
}
}
}
forwarding-options {
sampling {
instance {
s0 {
input {
rate 1;
run-length 0;
}
family inet {
output {
flow-server 198.51.100.2 { # The address of the external server.
port 2055;
version9 {
template {
v4
}
}
}
interface sp-2/0/0 {
source-address 192.168.1.1; # Source address of the sampled packets
}
}
}
}
s1 {
input {
rate 1;
run-length 0;
}
family inet {
output {
flow-server 198.51.100.2 { # The address of the external server.
port 2055;
version9 {
template {
v4
}
}
}
interface sp-2/1/0 {
source-address 192.168.1.2; # Source address of the sampled packets
}
}
}
}
}
}
}
routing-options {
static {
route 203.0.113.0/8 next-hop 192.0.2.2;
}
}
services {
flow-monitoring {
version9 {
template v4 {
flow-active-timeout 30;
flow-inactive-timeout 30;
ipv4-template;
}
}
}
}
用于配置示例的配置命令
set以下命令用于配置此示例中的采样实例。将这些命令中的值替换为与您自己的网络相关的值。
set chassis fpc 0 sampling-instance s0set chassis fpc 3 sampling-instance s1set interfaces ge-0/1/0 unit 0 family inet sampling inputset interfaces ge-0/1/0 unit 0 family inet addressset interfaces ge-1/0/0 unit 0 family inet addressset interfaces sp-2/0/0 unit 0 family inetset interfaces sp-2/1/0 unit 0 family inetset interfaces ge-3/1/0 unit 0 family inet sampling inputset interfaces ge-3/1/0 unit 0 family inet addressset forwarding-options sampling instance s0 input rate 1set forwarding-options sampling instance s0 input run-length 0set forwarding-options sampling instance s0 family inet output flow-server 198.51.100.2 port 2055set forwarding-options sampling instance s0 family inet output flow-server 198.51.100.2 version9 template v4;set forwarding-options sampling instance s0 family inet output interface sp-2/0/0 source-address 192.168.1.1set forwarding-options sampling instance s1 input rate 1set forwarding-options sampling instance s1 input run-length 0set forwarding-options sampling instance s1 family inet output flow-server 198.51.100.2 port 2055set forwarding-options sampling instance s1 family inet output flow-server 198.51.100.2 version9 template v4;set forwarding-options sampling instance s1 family inet output interface sp-2/1/0 source-address 192.168.1.2set routing-options static route 203.0.113.0/8 next-hop 192.0.2.2set services flow-monitoring version9 template v4 flow-active-timeout 30set services flow-monitoring version9 template v4 flow-inactive-timeout 30set services flow-monitoring version9 template v4 ipv4-template
验证您的工作
要验证配置是否按预期工作，请在使用采样实例配置的路由器上使用以下命令：
show services accounting aggregation template template-name template-nameshow services accounting flow
下面显示了在此配置示例中使用的 MX480 路由器上发出的命令的输出 show ：
user@MX480–router> show services accounting aggregation template template-name v4
Src Dst
Port/ Port/
Source Destination ICMP ICMP Packet
Address Address Type Code Proto TOS Count
10.0.0.6 203.0.113.3 100 1000 17 8 14
10.0.0.5 203.0.113.2 100 1000 17 8 15
10.0.0.3 203.0.113.3 100 1000 17 8 15
10.0.0.2 203.0.113.3 100 1000 17 8 15
10.0.0.4 203.0.113.2 100 1000 17 8 15
10.0.0.6 203.0.113.2 100 1000 17 8 15
10.0.0.4 203.0.113.3 100 1000 17 8 15
10.0.0.2 203.0.113.2 100 1000 17 8 16
10.0.0.3 203.0.113.2 100 1000 17 8 15
10.0.0.5 203.0.113.3 100 1000 17 8 15
user@MX480–router> show services accounting aggregation template template-name v4
Src Dst
Port/ Port/
Source Destination ICMP ICMP Packet
Address Address Type Code Proto TOS Count
10.0.0.6 203.0.113.3 100 1000 17 8 16
10.0.0.5 203.0.113.2 100 1000 17 8 17
10.0.0.3 203.0.113.3 100 1000 17 8 16
10.0.0.2 203.0.113.3 100 1000 17 8 16
10.0.0.4 203.0.113.2 100 1000 17 8 17
10.0.0.6 203.0.113.2 100 1000 17 8 17
10.0.0.4 203.0.113.3 100 1000 17 8 16
10.0.0.2 203.0.113.2 100 1000 17 8 17
10.0.0.3 203.0.113.2 100 1000 17 8 17
10.0.0.5 203.0.113.3 100 1000 17 8 16
user@MX480–router> show services accounting flow
Flow information
Interface name: sp-2/0/0, Local interface index: 152
Flow packets: 884, Flow bytes: 56576
Flow packets 10-second rate: 0, Flow bytes 10-second rate: 628
Active flows: 10, Total flows: 35
Flows exported: 75, Flows packets exported: 14
Flows inactive timed out: 25, Flows active timed out: 75
user@MX480–router> show services accounting flow
Flow information
Interface name: sp-2/0/0, Local interface index: 152
Flow packets: 898, Flow bytes: 57472
Flow packets 10-second rate: 0, Flow bytes 10-second rate: 628
Active flows: 10, Total flows: 35
Flows exported: 75, Flows packets exported: 14
Flows inactive timed out: 25, Flows active timed out: 75