[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Active Flow Monitoring Using Version 9

Beginning with JUNOS Release 8.3, you can collect a record of sampled flows using the version 9 format as defined in RFC 3954, Cisco Systems NetFlow Services Export Version 9. Version 9 uses templates to collect an set of sampled flows and send the record to a specified host.

You configure the version 9 template used to collect a record of sampled flows at the [edit services monitoring] hierarchy level. For more information, see the JUNOS Services Interfaces Configuration Guide and the JUNOS Feature Guide.

To enable the collection of traffic flows using the version 9 format, include the version9 statement at the [edit forwarding-options sampling output cflowd hostname] hierarchy level:



[edit forwarding-options sampling  output cflowd hostname]

version9 {
template template-name;
}

template-name is the name of the version 9 template configured at the [edit services monitoring] hierarchy level.

You configure traffic sampling at the [edit forwarding-options sampling input] hierarchy level. Beginning with JUNOS Release 8.3, traffic sampling supports MPLS traffic as well as IPv4 traffic. You can define a version 9 flow record template suitable for IPv4 traffic, MPLS traffic, or a combination of the two. However, you can sample packets from only one type of family (inet or mpls) at the same time. For more information about how to configure traffic sampling, see Configuring Traffic Sampling.

The following restrictions apply to configuration of the version 9 format:

You can configure only one host to collect traffic flows using the version 9 format. Configure the host at the [edit forwarding-options sampling output cflowd hostname] hierarchy level.
You cannot specify both the version 9 format and cflowd versions 5 and 8 formats in the same configuration. For more information about how to configure flow monitoring using cflowd version 8, see Configuring Flow Aggregation (cflowd).
Any values for flow-active-timeout and flow-inactive-timeout that you configure at the [edit forwarding-options sampling output] hierarchy level are overridden by the values configured in the version 9 template.
Version 9 does not support Routing Engine-based sampling. You cannot configure version 9 to send traffic sampling result to a file in the /var/tmp directory.

Example: Configuring Active Flow Monitoring Using Version 9

In this example, you enable active flow monitoring using version 9. You specify a template mpls that you configure at [edit services monitoring] hierarchy level. You also configure the traffic family mpls to sample.



[edit forwarding-options]
sampling {


input {


family mpls {
rate 1;
run-length;
}


}




output {


cflowd 10.60.2.1 { # The IP address and port of the host
port 2055; # that collects the sampled traffic flows.
source-address 3.3.3.1;


version9 {
template mpls; # Version 9 records are sent
} # using the template named mpls


}


}

[Contents] [Prev] [Next] [Index] [Report an Error]