Example for Configuring IPv4 Flexible Flow Statistics Exporting
Networking Requirements
In Figure 11-14, departments 1 and 2 connect to the Internet through SwitchA. Network administrators want to monitor communication between departments and the Internet.
Configuration Roadmap
To monitor communication between the departments and the Internet, the network administrator needs to:
- Configure IPv4 flexible flow statistics exporting on GE1/0/1 of SwitchA.
- Collect statistics about incoming and outgoing traffic on the interface.
- Send statistics to the NetStream server for further analysis.
The configuration roadmap is as follows:
- Configure IP addresses for interfaces on SwitchA.
- Configure a flexible flow statistics template.
- Configure NetStream flexible flow statistics exporting.
- Enable flexible flow statistics collection on the interface.
Procedure
- Configure IP addresses for interfaces on SwitchA as shown in Figure 11-14.
# Configure IP addresses for interfaces on SwitchA.
<HUAWEI> system-view [HUAWEI] sysname SwitchA [SwitchA] vlan batch 100 200 300 400 [SwitchA] interface vlanif 100 [SwitchA-Vlanif100] ip address 10.1.1.1 24 [SwitchA-Vlanif100] quit [SwitchA] interface vlanif 200 [SwitchA-Vlanif200] ip address 10.1.2.1 24 [SwitchA-Vlanif200] quit [SwitchA] interface vlanif 300 [SwitchA-Vlanif300] ip address 10.1.3.1 24 [SwitchA-Vlanif300] quit [SwitchA] interface vlanif 400 [SwitchA-Vlanif400] ip address 10.1.4.1 24 [SwitchA-Vlanif400] quit [SwitchA] interface gigabitEthernet 1/0/1 [SwitchA-GigabitEthernet1/0/1] port link-type hybrid [SwitchA-GigabitEthernet1/0/1] port hybrid pvid vlan 100 [SwitchA-GigabitEthernet1/0/1] port hybrid untagged vlan 100 [SwitchA-GigabitEthernet1/0/1] quit [SwitchA] interface gigabitEthernet 1/0/2 [SwitchA-GigabitEthernet1/0/2] port link-type hybrid [SwitchA-GigabitEthernet1/0/2] port hybrid pvid vlan 200 [SwitchA-GigabitEthernet1/0/2] port hybrid untagged vlan 200 [SwitchA-GigabitEthernet1/0/2] quit [SwitchA] interface gigabitEthernet 1/0/3 [SwitchA-GigabitEthernet1/0/3] port link-type hybrid [SwitchA-GigabitEthernet1/0/3] port hybrid pvid vlan 300 [SwitchA-GigabitEthernet1/0/3] port hybrid untagged vlan 300 [SwitchA-GigabitEthernet1/0/3] quit [SwitchA] interface gigabitEthernet 1/0/4 [SwitchA-GigabitEthernet1/0/4] port link-type hybrid [SwitchA-GigabitEthernet1/0/4] port hybrid pvid vlan 400 [SwitchA-GigabitEthernet1/0/4] port hybrid untagged vlan 400 [SwitchA-GigabitEthernet1/0/4] quit
- Configure a flexible flow statistics template.
# Create a flexible flow statistics template named test, configure aggregation based on the destination IP address and destination port number, configure the number of bytes and packets in the exported packets, and configure the indexes of the inbound and outbound interfaces.
[SwitchA] ip netstream record test [SwitchA-record-test] match ip destination-address [SwitchA-record-test] match ip destination-port [SwitchA-record-test] collect interface input [SwitchA-record-test] collect interface output [SwitchA-record-test] collect counter bytes [SwitchA-record-test] collect counter packets [SwitchA-record-test] quit
- Configure exporting of NetStream flexible flow statistics.
# Set the source IP address of the exported packets carrying flexible flow statistics to 10.1.2.1, the destination IP address to 10.1.2.2, and the destination port number to 6000.
[SwitchA] ip netstream export source 10.1.2.1 [SwitchA] ip netstream export host 10.1.2.2 6000
- Enable NetStream flexible flow statistics collection on the interface.
# Enable flexible flow statistics exporting on GE1/0/1, and apply the flexible flow statistics template test to GE1/0/1.
[SwitchA] interface gigabitEthernet 1/0/1 [SwitchA-GigabitEthernet1/0/1] port ip netstream record test [SwitchA-GigabitEthernet1/0/1] ip netstream inbound [SwitchA-GigabitEthernet1/0/1] ip netstream outbound [SwitchA-GigabitEthernet1/0/1] quit [SwitchA] quit
- Verify the configuration.
# After the configuration is complete, the NetStream server receives the statistics packets from the device. Run the display ip netstream statistics command on the local device to view NetStream statistics.
<SwitchA> display ip netstream statistics slot 1 ===== Netstream statistics: ===== Origin/Flexible ingress entries : 20 Origin/Flexible ingress packets : 176541 Origin/Flexible ingress octets : 123657230 Origin/Flexible egress entries : 0 Origin/Flexible egress packets : 0 Origin/Flexible egress octets : 0 Origin/Flexible total entries : 20 Handle origin entries : 0 Handle As aggre entries : 0 Handle ProtPort aggre entries : 0 Handle SrcPrefix aggre entries : 0 Handle DstPrefix aggre entries : 0 Handle Prefix aggre entries : 0 Handle AsTos aggre entries : 0 Handle ProtPortTos aggre entries : 0 Handle SrcPreTos aggre entries : 0 Handle DstPreTos aggre entries : 0 Handle PreTos aggre entries : 0 Record test handle entries : 10
Configuration Files
SwitchA configuration file
# sysname SwitchA # vlan batch 100 200 300 400 # ip netstream export source 10.1.2.1 ip netstream export host 10.1.2.2 6000 # ip netstream record test match ip destination-address match ip destination-port collect counter packets collect counter bytes collect interface input collect interface output # interface Vlanif100 ip address 10.1.1.1 255.255.255.0 # interface Vlanif200 ip address 10.1.2.1 255.255.255.0 # interface Vlanif300 ip address 10.1.3.1 255.255.255.0 # interface Vlanif400 ip address 10.1.4.1 255.255.255.0 # interface GigabitEthernet1/0/1 port link-type hybrid port hybrid pvid vlan 100 port hybrid untagged vlan 100 ip netstream inbound ip netstream outbound port ip netstream record test # interface GigabitEthernet1/0/2 port link-type hybrid port hybrid pvid vlan 200 port hybrid untagged vlan 200 # interface GigabitEthernet1/0/3 port link-type hybrid port hybrid pvid vlan 300 port hybrid untagged vlan 300 # interface GigabitEthernet1/0/4 port link-type hybrid port hybrid pvid vlan 400 port hybrid untagged vlan 400 # return