RE: [j-nsp] How to configure Cflowd in juniper router..

From: Fabian Prout (Fabian.Prout@silicomp.fr)
Date: Fri Feb 02 2001 - 02:10:39 EST


Hi Jack,

In your filter sequence you forgot to specify which packets you wanted to
sample.

Here is a filter i used for cflowd configuration on Juniper :

interfaces {
    e3-1/1/0 {
            unit 0 {
                family inet {
                    filter {
                        input cflowd;
                    }
                   address 10.0.0.1/30;
                   }
               }
          }
}

firewall {
 filter cflowd {
        term sampled_packets {
            from {
                source-address {
                    0.0.0.0/0;
                }
            }
            then {
                sample;
                accept;
            }
        }
        term other {
            then accept;
        }
    }
}

This will sample all packet running through an interface - in input here.

Hope it helps,
Fabian.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Fabian PROUT tel : +33 (0)1 30 97 22 55
Ingenieur Reseau fax : +33 (0)1 30 97 22 11
2, rue du Pont Colbert http://www.silicomp.com
F-78000 VERSAILLES
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
  -----Message d'origine-----
  De : Jack Seo [mailto:jackseo@ibrglobal.com]
  Envoye : vendredi 2 fevrier 2001 03:45
  A : juniper-nsp@puck.nether.net
  Objet : [j-nsp] How to configure Cflowd in juniper router..

  Hi. Juniper lovers ;)

  I'm testing Cflowd of JunOS 4.1 with my SUN server.
  It work very well with Cisco router..but with juniper router.. not well..
  maybe I forgot something important can make it happen. but I'm not sure.

  I made one fiirewall filter getcfolwd like following

  firewall fiter getcflowd
                    term 1
                           then sample
                                   accept

  and put this filter into the interface I wanted below unit 0 family inet

  and in forwarding options, I confgiured input family inet , output
cflowd ( engine-id , version 5 , local-dump ( to debug) , port 2055 and
server running cfolwd ip adderess )

  I think this is almost perfect for cflowd running ~ but it doesn't work...

  Please help..

  show me a good example for me.

  thanks.

  Jack Seo - Technical Support Engineer

  IBR Inc. NPIX DataCenter -AS9777
  Office : 82-2-2140-2720
  C.P : 82-017-726-1417
  http://www.npix.net



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:40 EDT