Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] Inline-IPFIX support on AF interface

0

0

Article ID: KB37459 KB Last Updated: 17 Sep 2021Version: 1.0
Summary:

This article answers the question whether IPFIX is supported on both input and output Abstracted Fabric (AF) interfaces in a node-slicing environment.

Solution:

IPFIX active flow monitoring is implemented on the Packet Forwarding Engine. It also supports AF interfaces in a node-slicing environment.

Configuration example for output direction:

 GNF1(af0.0)  --- (af0.0) GNF2 --- Tester
                                     <---------------------------output direction (af0.0) GNF2
 
labroot@router_re0# show services | display set
set services flow-monitoring version-ipfix template v4-ipfix-template flow-active-timeout 60
set services flow-monitoring version-ipfix template v4-ipfix-template flow-inactive-timeout 60
set services flow-monitoring version-ipfix template v4-ipfix-template template-refresh-rate packets 4800
set services flow-monitoring version-ipfix template v4-ipfix-template template-refresh-rate seconds 600
set services flow-monitoring version-ipfix template v4-ipfix-template option-refresh-rate packets 4800
set services flow-monitoring version-ipfix template v4-ipfix-template option-refresh-rate seconds 600
set services flow-monitoring version-ipfix template v4-ipfix-template ipv4-template
 
set chassis fpc 2 sampling-instance inline-jflow-instance
set chassis fpc 2 inline-services flow-table-size ipv4-flow-table-size 5
 
labroot@router_re0# show interfaces af0 | display set
set interfaces af0 unit 0 family inet filter output cflow
set interfaces af0 unit 0 family inet address 10.10.10.2/2
 
labroot@router_re0# show firewall | display set
set firewall family inet filter cflow term 1 then count CFLOW-SAMPLE
set firewall family inet filter cflow term 1 then syslog
set firewall family inet filter cflow term 1 then sample
set firewall family inet filter cflow term 1 then accept

Verification

labroot@router_re0# run show services accounting flow inline-jflow fpc-slot 2   
  Flow information
    FPC Slot: 2
    Flow Packets: 31320, Flow Bytes: 3445200
    Active Flows: 1, Total Flows: 1
    Flows Exported: 11, Flow Packets Exported: 0
    Flows Inactive Timed Out: 0, Flows Active Timed Out: 0
    Total Flow Insert Count: 1

IPFIX can be applied in the input direction in the same way as shown above. An AF interface in a node slicing environment can, therefore, use IPFIX in both input and output direction as a normal interface would.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search