Technical Documentation

Configuring the Control Source

You configure information about the control source, including allowed source addresses, destinations, and authentication key values. To configure the control source information, include the control-source statement at the [edit services dynamic-flow-capture] hierarchy level:

[edit services dynamic-flow-capture capture-group client-name]control-source identifier {allowed-destinations [ destination-identifier ];no-syslog;notification-targets [ address address port port-number ];service-port port-number;shared-key value;source-addresses [ address ];}

Assign the control-source statement with a unique identifier. You can also include values for the following statements:

  • allowed-destinations—One or more content destination identifiers to which this control source can request matched data to be sent in its control protocol requests. If you do not specify any content destinations, all available destinations are allowed.
  • notification-targets—One or more destinations to which the dynamic flow capture interface can log information about control protocol-related events and other events such as PIC startup messages. You configure each notification-target entry with an IP address value and a User Datagram Protocol (UDP) port number.
  • service-port—UDP port number to which the control protocol requests are directed. Control protocol requests that are not directed to this port are discarded by dynamic flow capture interfaces.
  • shared-key—A 20-byte authentication key value shared between the control source and the dynamic flow capture monitoring station.
  • source-addresses—One or more allowed IP addresses from which the control source can send control protocol requests to the dynamic flow capture monitoring station. These are /32 addresses.

Published: 2010-04-15