[j-nsp] Netflow feature for Juniper ?

Farhan Jaffer bandhani at gmail.com
Sat Dec 16 03:29:05 EST 2006


Thanks Aaron.

I believe this config is enough for filter 'all'.

firewall
{
    filter all {
        term all {
            then {
                sample;
                accept;
            }
        }
    }
}


What do u say?

Regards
Farhan Jaffer


On 12/16/06, Aaron Dewell <aaron.dewell at woods.net> wrote:
>
>
> Do you have a firewall filter named "all" configured?
>
> Aaron
>
> On Sat, 2006-12-16 at 13:04 +0500, Farhan Jaffer wrote:
> >  I want to configure netflow on Juniper M7i having Junos version
> 7.6R1.10,
> > just like ip flow-export & ip route-cache flow (related) commands in
> Cisco
> > IOS. Also i like to enable cache flow or ip accounting on any fast
> ethernet
> > interface when needed.
> > Kindly help me to solve this.
> >
> > I have configured router for netflow feature using these command, but it
> > didn't work
> >
> > interfaces {
> >     fe-0/3/0 {
> >         unit 0 {
> >             family inet {
> >                 filter {
> >                     input all;
> >                     output all;
> >                 }
> >                 address 10.0.0.1/24;
> >             }
> >         }
> >     }
> >
> > firewall {
> >     filter all {
> >         term all {
> >             then {
> >                 sample;
> >                 accept;
> >             }
> >         }
> >     }
> > }
> >
> > forwarding-options {
> >     sampling {
> >         input {
> >             family inet {
> >                 rate 100;
> >             }
> >         }
> >         output {
> >             cflowd 10.0.0.100 {
> >                 port 9800;
> >                 version 5;
> >             }
> >         }
> >     }
> > }
> >
> > Any comments ??
> >
> > Thanks in advance.
> >
> --
> Aaron Dewell
> Sr. Network/Systems Consultant
> Woods Networking Consultants, Inc.
> +1.408.857.0778
> aaron.dewell at woods.net
>
>
>


More information about the juniper-nsp mailing list