Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] Example working J-Flow configuration

0

0

Article ID: KB21023 KB Last Updated: 27 Jun 2020Version: 4.0
Summary:

This is a configuration example for J-Flow on SRX devices.

Symptoms:

You have a complaint that the same configuration is working on the other routers, but not as well on the SRX Series device.

Users with the following configuration may face some issues with the J-Flow servers, such as server not able to receive the flow from the SRX device intermittently.

#show interfaces ge-0/0/0
unit 0 {
     family inet {
         filter {
             input flow-filter;
         }
         address 1.1.1.1/30;
     }
}

#show firewall
filter flow-filter {
    term 1 {
        then {
            sample;
            accept;
        }
     }
}

#show forwarding-options
sampling {
    input {
        rate 100;
    }
    family inet {
        output {
            flow-server 2.2.2.2 {
                port <JFlow port number e.g. 2055,2056>;
                version 5;
            }
        }
    }
}

 

Solution:

The solution is to switch to a more simpler configuration without filters.

In the following example, a lower amount of processing is involved, as we have bypassed the additional Filter Configuration.

#show interfaces ge-0/0/0
unit 0 {
    family inet {
        sampling {
            input;
            output;
        }
       address 1.1.1.1/30;
    }
}

#show forwarding-options
sampling {
     input {
         rate 100;
     }
     family inet {
         output {
             flow-server 2.2.2.2 {
                 port <JFlow port number e.g. 2055,2056>;
                 version 5;
             }
        }
     }
}

Modification History:
2020-06-27: Removed J Series references.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search