[j-nsp] IPV6 IPFIX Flow issues "nodata" on flow collector.
Gustavo Santos
gustkiller at gmail.com
Mon Dec 4 16:44:11 EST 2017
Hi Steinar,
I am using about the same settings from IPv4 with IPv6 just changing the
template version..
About the flow monitoring settings I as using the same one as you can see
below on IPv4 with IPv6, the current one was done after some tests...
sampling {
traceoptions {
file ipfix.log size 10k;
}
instance {
FLOW-INSTANCE {
input {
rate 1000;
max-packets-per-second 10000;
}
family inet {
output {
flow-server xxx.xxxx.xxx.xxx{
port 9995;
autonomous-system-type origin;
no-local-dump;
version-ipfix {
template {
ipv4;
}
}
}
inline-jflow {
source-address xxx.xxx.xxx.xxx;
}
}
}
family inet6 {
output {
flow-server xxx.xxx.xxx.xxx {
port 9995;
autonomous-system-type origin;
no-local-dump;
version-ipfix {
template {
ipv6;
}
}
}
inline-jflow {
source-address xxx.xxx.xxx.xxx;
}
}
}
}
vlan-id 2XX8;
family inet6 {
sampling {
input;
output;
}
address 2001:xxx:0:xxx::216/64;
}
flow-monitoring {
version-ipfix {
template ipv4 {
flow-active-timeout 600;
flow-inactive-timeout 30;
template-refresh-rate {
packets 48000;
seconds 60;
}
option-refresh-rate {
packets 48000;
seconds 60;
}
ipv4-template;
}
template ipv6 {
flow-active-timeout 150;
flow-inactive-timeout 100;
template-refresh-rate {
seconds 10;
}
option-refresh-rate {
seconds 10;
}
ipv6-template;
}
}
}
2017-12-01 15:10 GMT-03:00 <sthaug at nethelp.no>:
> > Anyone else had issues with Junos 16.1R4 with IPV6 and IPFIX?
> >
> > Here we use Plixer Scrutinizer as Flow collector and analyzer. IPv4 flow
> > monitoring is working as intended. With IPv6 , looks like the collector
> is
> > don´t know what to do with the data the Router is sending (MX480).
> >
> > After a Call , looks like the router is not sending the correct templates
> > to Scrutinizer, the only information it can identify is the current
> > interface traffic from the flows. But no source and destination ipv6
> > address.
>
> Can't comment on 16.1R4. We're running IPFIX flow collection on 15.1R6
> and it seems to be working reasonably well, both for IPv4 and IPv6. No
> problem showing IPv6 addresses with nfdump.
>
> You may want to show your config.
>
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no
>
More information about the juniper-nsp
mailing list