CloudEngine 12800 and 12800E V200R019C10 Command Reference
NetStream Configuration Commands
In compliance with IETF RFC3954, Huawei NetStream analyzes the communications information of end users. Before enabling this function, ensure that it is performed within the boundaries permitted by applicable laws and regulations. Effective measures must be taken to protect information confidentiality.
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support NetStream Top Talkers.
- assign forward enp netstream enable
- assign netstream management-plane export rate-limit
- cache-timeout
- collect counter
- collect interface
- description (flexible flow statistics template view)
- display forward enp
- display netstream
- display netstream cache ethernet
- display netstream cache ip aggregation
- display netstream cache ip record
- display netstream cache ip origin
- display netstream cache ipv6 aggregation
- display netstream cache ipv6 record
- display netstream cache ipv6 origin
- display netstream cache vxlan inner-ip record
- display netstream export ethernet template
- display netstream export ip template
- display netstream export ipv6 template
- display netstream export vxlan inner-ip template
- display netstream filter applied-record
- display netstream statistics ethernet
- display netstream statistics ip
- display netstream statistics ipv6
- display netstream statistics vxlan inner-ip
- display netstream top-talkers ip
- enable
- export version
- mask
- match inner-ip
- match ip
- match ip (NetStream Top Talkers template view)
- match ipv6
- netstream aggregation ip
- netstream aggregation timeout ip active
- netstream aggregation timeout ip inactive
- netstream aggregation ipv6
- netstream aggregation timeout ipv6 active
- netstream aggregation timeout ipv6 inactive
- netstream as-mode
- netstream ethernet
- netstream export ethernet host
- netstream export ethernet index-switch
- netstream export ethernet source
- netstream export ethernet template timeout-rate
- netstream export ethernet version
- netstream export ip host
- netstream export ip index-switch
- netstream export ip route disable
- netstream export ip source
- netstream export ip template timeout-rate
- netstream export ip version
- netstream export ipv6 host
- netstream export ipv6 index-switch
- netstream export ipv6 route disable
- netstream export ipv6 source
- netstream export ipv6 template timeout-rate
- netstream export ipv6 version
- netstream export packet-len ethernet-crc
- netstream export vxlan inner-ip host
- netstream export vxlan inner-ip index-switch
- netstream export vxlan inner-ip source
- netstream export vxlan inner-ip template timeout-rate
- netstream export vxlan inner-ip version
- netstream gre-aware ip
- netstream inbound ip filter
- netstream inbound ipv6 filter
- netstream inbound ip filter gre
- netstream inbound ip filter vxlan
- netstream ip
- netstream ipv6
- netstream record ip (interface view)
- netstream record ip (system view)
- netstream record ipv6 (interface view)
- netstream record ipv6 (system view)
- netstream record vxlan inner-ip (interface view)
- netstream record vxlan inner-ip (system view)
- netstream mpls-aware ip
- netstream sampler
- netstream sampler inbound resource snoop
- netstream timeout ethernet active
- netstream timeout ethernet inactive
- netstream timeout ip active
- netstream timeout ip inactive
- netstream timeout ip tcp-session
- netstream timeout ipv6 active
- netstream timeout ipv6 inactive
- netstream timeout ipv6 tcp-session
- netstream timeout vxlan inner-ip active
- netstream timeout vxlan inner-ip inactive
- netstream timeout vxlan inner-ip tcp-session
- netstream top-talkers ip (system view)
- netstream top-talkers ip (interface view)
- netstream top-talkers ip starting
- reset netstream cache ethernet
- reset netstream cache ip
- reset netstream cache ipv6
- reset netstream cache vxlan inner-ip
- reset netstream statistics ethernet
- reset netstream statistics ip
- reset netstream statistics ipv6
- reset netstream statistics vxlan inner-ip
- sort-by
- starting time
- template timeout-rate
- top number
assign forward enp netstream enable
Function
The assign forward enp netstream enable command enable the enhanced mode of a card. After the enhanced mode is enabled, you can use the NetStream enhanced mode and BFD enhanced mode of the card. In addition, the intelligent traffic analysis function is enabled.
The undo assign forward enp netstream enable command disables the enhanced mode of a card. After the enhanced mode is disabled, you can use the NetStream non-enhanced mode and BFD non-enhanced mode of the card. In addition, the intelligent traffic analysis function is disabled.
By default, the card uses the NetStream non-enhanced mode and BFD non-enhanced mode, and the intelligent traffic analysis function is disabled.
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support this command.
Format
assign forward enp netstream enable slot { slot-id | all }
undo assign forward enp netstream enable slot { slot-id | all }
Parameters
| Parameter | Description | Value |
|---|---|---|
slot slot-id |
Specifies a slot ID. |
The value is an integer. You can enter a question mark (?) and select a value from the displayed value range. On a stacked device, slot-id is in the format stack ID/slot ID. |
all |
Indicates all cards. |
- |
Usage Guidelines
Usage Scenario
- Non-enhanced mode: A card uses the CPU for NetStream sampling, which greatly affects CPU performance.
- Enhanced mode: A card uses CPU built-in chip for NetStream sampling, which therefore does not affect CPU performance and improves the NetStream performance.
To enable a card to perform NetStream sampling in enhanced mode, run the assign forward enp netstream enable command. This can improve NetStream performance. In enhanced mode, when NetStream is configured in outbound and inbound directions on all the interfaces of a card, the recommended minimum NetStream sampling rate is 2048. For details on how to calculate the NetStream sampling rate, see Calculation of the NetStream Sampling Rate.
Precautions
This command is supported only by the FD-X, CEL36LQFD-M, CEL36CQFD-M, CEL24LQFD-M, CEL12CQFD-M, CE-L36LQ-FD, CE-L36CQ-FD, CE-L36CQ-FG, CE-L36CQ-FD1, CE-L36CQ-SD, CE-L16CQ-FD, CE-L08CF-FG1, CE-L48XS-FG, CE-L48XS-FD1, CE-L24LQ-FD, or CE-L12CQ-FD. When the cards perform NetStream sampling in enhanced mode, the switch cannot send NetStream packets through the management interface.
If the assign forward enp sflow enable command is run together with the assign forward enp netstream enable command, the later one overwrites the previous one.
This command takes effect after the card is restarted.
- You can run this command in the Admin-VS only, and the configuration takes effect for all VSs.
Example
# Enable the enhanced mode of the card on slot 1.
<HUAWEI> system-view [~HUAWEI] assign forward enp netstream enable slot 1 Info: The configuration will take effect after the card is reset. After the reset, the enhanced NetStream, enhanced BFD, and intelligent traffic analysis functions can be used.
assign netstream management-plane export rate-limit
Function
The assign netstream management-plane export rate-limit command limits the rate of NetStream packets sent from cards to the control plane, thereby limiting the rate of NetStream packets sent out by the control plane.
The undo assign netstream management-plane export rate-limit command cancels limitation on the rate of NetStream packets sent from cards to the control plane.
By default, the rate of NetStream packets sent to the control plane is not limited.
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support this command.
Format
assign netstream management-plane export rate-limit rate-limit [ slot slot-id ]
undo assign netstream management-plane export rate-limit rate-limit [ slot slot-id ]
Parameters
| Parameter | Description | Value |
|---|---|---|
rate-limit |
Specifies the rate of NetStream packets sent from a card to the control plane. |
The value is an integer that ranges from 100 to 1500, in pps. |
slot slot-id |
Specifies the slot where the rate of output NetStream packets is limited. If this parameter is not specified, the rate of NetStream packets sent from all cards to the control plane is limited. |
The value is an integer. You can enter a question mark (?) and select a value from the displayed value range. On a stacked device, slot-id is in the format stack ID/slot ID. |
Usage Guidelines
Usage Scenario
After NetStream is configured on a switch, the switch selects a service interface or management interface to send out NetStream packets according to the route to the NetStream server. If the switch selects the service interface, the NetStream packets generated in NetStream sampling are forwarded out through the service interface, but do not pass the control plane. If the switch selects the management interface, the NetStream packets generated in NetStream sampling are forwarded to the control plane for processing and then sent out through the management interface.
When a network has heavy traffic and the switch sends NetStream packets through the management interface to the NetStream server, a large number of NetStream packets generated by cards are sent to the control plane to overwhelm the CPU and affect the running of other protocols, or even cause the switch to be out of management. To limit the rate of NetStream packets sent from cards to the control plane, run the assign netstream management-plane export rate-limit command. After this command is executed, the rate of NetStream packets sent from the control plane is also limited, and the number of NetStream packets sent through the management interface is reduced.
Precautions
If the assign netstream management-plane export rate-limit rate-limit slot slot-id command has been executed to limit the rate of NetStream packets sent from a specified card to the control plane, you cannot run the assign netstream management-plane export rate-limit rate-limit command to limit the rate of NetStream packets sent from all cards to the control plane. If the assign netstream management-plane export rate-limit rate-limit command has been executed to limit the rate of NetStream packets sent from all cards to the control plane, you cannot run the assign netstream management-plane export rate-limit rate-limit slot slot-id command to limit the rate of NetStream packets sent from a specified card to the control plane.
You can run this command in the Admin-VS only, and the configuration takes effect for all VSs.
cache-timeout
Function
The cache-timeout command sets the traffic statistics collection period in a NetStream Top Talkers template.
The undo cache-timeout command deletes the traffic statistics collection period in a NetStream Top Talkers template.
By default, the traffic statistics collection period in a NetStream Top Talkers template is not set.
Parameters
| Parameter | Description | Value |
|---|---|---|
| millisecond | Indicates the traffic statistics collection period in a NetStream Top Talkers template. | The value is an integer that ranges from 1 to 3600000, in milliseconds. |
Usage Guidelines
The NetStream Top Talkers function is used to collect traffic statistics for analysis within a specified period on the network. You can run the cache-timeout command to set the traffic statistics collection period in a NetStream Top Talkers template. You are advised to set the period longer than 600000 ms (10 minutes). If the period is too short, the collected traffic statistics may be incomplete.
collect counter
Function
The collect counter command allows the flexible flow statistics exported to the NetStream Collector (NSC) to contain the number of bytes and packets.
The undo collect counter command restores the default setting.
By default, the flexible flow statistics exported to the NSC do not contain the number of bytes or packets.
Parameters
Parameter |
Description |
Value |
|---|---|---|
| bytes | Indicates that the flexible flow statistics exported to NSC contain the number of bytes. |
- |
| packets | Indicates that the flexible flow statistics exported to NSC contain the number of packets. |
- |
Views
IPv4 flexible flow statistics template view, IPv6 flexible flow statistics template view, VXLAN flexible flow statistics template view
Usage Guidelines
Usage Scenario
To obtain richer flow statistics, configure whether flexible flow statistics contain the number of bytes and packets.
Prerequisites
A flexible flow statistics template has been created using the netstream record ip, netstream record ipv6, or netstream record vxlan inner-ip command.
Precaution
If a flexible flow statistics template has been applied to an interface, the template configuration cannot be modified or deleted.
collect interface
Function
The collect interface command allows the flexible flow statistics exported to the NSC to contain the indexes of inbound and outbound interfaces.
The undo collect interface command restores the default setting.
By default, the flexible flow statistics exported to the NSC do not contain the index of inbound or outbound interface.
Parameters
Parameter |
Description |
Value |
|---|---|---|
input |
Indicates that the flexible flow statistics exported to the NSC contain the index of inbound interface. |
- |
output |
Indicates that the flexible flow statistics exported to the NSC contain the index of outbound interface. |
- |
Views
IPv4 flexible flow statistics template view, IPv6 flexible flow statistics template view, VXLAN flexible flow statistics template view
Usage Guidelines
Usage Scenario
To obtain richer flow statistics, configure whether flexible flow statistics exported to the NSC contain indexes of inbound and outbound interfaces.
Prerequisites
A flexible flow statistics template has been created using the netstream record ip, netstream record ipv6, or netstream record vxlan inner-ip command.
Precaution
If a flexible flow statistics template has been applied to an interface, the template configuration cannot be modified or deleted.
description (flexible flow statistics template view)
Function
The description command configures a description for a flexible flow.
The undo description command deletes a description for a flexible flow.
By default, no flexible flow description is configured.
Parameters
| Parameter | Description | Value |
|---|---|---|
description-information |
Specifies the description for a flexible flow. |
The value is a string of 1 to 80 case-sensitive characters, with spaces supported. |
Views
IPv4 flexible flow statistics template view, IPv6 flexible flow statistics template view, VXLAN flexible flow statistics template view
Usage Guidelines
Usage Scenario
Multiple flexible flows can be configured, each of which can be assigned matching and collected fields. To help rapidly understand a flexible flow, run the description command to configure a description for each flow. For example, a description defines some fields or meanings of fields in packets for a flexible flow.
Configuration Impact
If a description has been configured for a flexible flow, running the description command override the previous description.
display forward enp
Function
The display forward enp command command displays the functions in enhanced mode enabled on a card.
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support this command.
Parameters
| Parameter | Description | Value |
|---|---|---|
slot slot-id |
Specifies a slot ID. |
The value is an integer. You can enter a question mark (?) and select a value from the displayed value range. On a stacked device, slot-id is in the format stack ID/slot ID. |
Example
# Display the functions in enhanced mode enabled on a card.
<HUAWEI> display forward enp
--:Boards do not support ENP mode
Board ENP(ethernet network processor) mode:
--------------------------------------------------
Slot CurrentMode NextMode
--------------------------------------------------
1/2 NetStream sFlow
1/3 -- --
1/4 NetStream NetStream
--------------------------------------------------
Item |
Description |
|---|---|
Slot |
Slot ID. |
CurrentMode |
Functions in enhanced mode enabled on the card.
|
NextMode |
Effective mode upon the next startup:
|
display netstream
Parameters
Parameter |
Description |
Value |
|---|---|---|
all |
Displays all the NetStream configurations, including:
|
- |
global |
Displays the global NetStream configurations, including:
|
- |
| interface interface-type interface-number | Displays the NetStream configurations on a specified interface. The parameter interface-type interface-number specifies the interface type and number. |
- |
Usage Guidelines
This command displays the NetStream configurations for both IPv4 and IPv6 flows.
Example
# Display all the NetStream configurations.
<HUAWEI> display netstream all
system
netstream export ip source 192.168.1.1
netstream export ip host 192.168.10.1 3000
netstream aggregation ip protocol-port
enable
export version 9
Item |
Description |
|---|---|
netstream export ip source ip-address |
The field ip-address indicates the source address of the exported packets carrying IPv4 flow statistics. To configure the source address, run netstream export ip source. |
netstream export ip host ip-address port-number |
The field ip-address indicates the destination address of the exported packets carrying IPv4 flow statistics, and port-number is the UDP port. To configure the destination address and UDP port, run netstream export ip host. |
netstream aggregation ip protocol-port |
The aggregation method is set to protocol-port. To set the aggregation method, run netstream aggregation ip. |
enable |
The protocol-port aggregation method is enabled. To enable the aggregation method, run enable. |
export version version |
The field version indicates the version of the exported packets carrying aggregation flow statistics. If the version retains the default setting, this field is not displayed. To set the version, run export version. |
display netstream cache ethernet
Function
The display netstream cache ethernet command displays details on Layer 2 NetStream statistics on a card.
Format
display netstream cache ethernet [ { inbound | outbound } | destination interface interface-type interface-number | destination mac-address mac-address | source interface interface-type interface-number | source mac-address mac-address | ethernet-type ethernet-type | vlan vlan-id ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination mac-address mac-address |
Specifies the destination MAC address of packets. |
The value is in the format H-H-H, in which H is a hexadecimal number of 1 to 4 digits. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source mac-address mac-address |
Specifies the source MAC address of packets. |
The value is in the format H-H-H, in which H is a hexadecimal number of 1 to 4 digits. |
ethernet-type ethernet-type |
Specifies an Ethernet packet type. |
The value is a hexadecimal integer that ranges from 0 to FFFF. |
vlan vlan-id |
Indicates the ID of a specified VLAN. |
The value is an integer that ranges from 1 to 4094. |
slot slot-id |
Specifies the slot ID of a card. |
Set the value according to device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, Layer 2 flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time Layer 2 NetStream flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
The CE12800E configured with FD-X series cards cannot sample Layer 2 information in downstream Layer 3 packets forwarded through the same chip.
Example
# Display Layer 2 NetStream flow statistics on the card.
<HUAWEI> display netstream cache ethernet slot 1 verbose
NetStream cache information:
-------------------------------------------------------------------------------
SrcIf Source-MAC Ethernet-Type Direction Vlan
DstIf Destination-MAC Octets Packets
-------------------------------------------------------------------------------
- 0000-5e00-0104 0x800 OUT 17
10GE1/0/22 0100-5e00-0012 4012 59
10GE1/0/22 0000-5e00-0105 0x800 IN 17
- 0100-5e00-0012 3264 48
10GE1/0/22 0000-5e00-0106 0x800 IN 17
- 0100-5e00-0012 3468 51
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIf |
Source interface. |
Source-MAC |
Source MAC address of packets. |
Ethernet-Type |
Ethernet type of packets. |
Direction |
Packet sampling direction:
|
Vlan |
VLAN ID of packets. |
DstIf |
Destination interface. |
Destination-MAC |
Destination MAC address of packets. |
Octets |
Number of octets in packets. |
Packets |
Number of packets. |
display netstream cache ip aggregation
Function
The display netstream cache ip aggregation command displays details about IPv4 aggregation flow statistics on a card.
Format
display netstream cache ip aggregation { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | mpls-label | prefix | prefix-tos | protocol-port | protocol-port-tos | source-index-tos | source-prefix | source-prefix-tos | vlan-id } slot slot-id [ chip chip-id ] [ verbose ]
The CE12800E does not support the mpls-label parameter, because the CE12800E does not support MPLS.
The CE12800E does not support the as, as-tos, and bgp-nexthop-tos parameters when configured with ED-E, EG-E, and EGA-E series cards, because ED-E, EG-E, and EGA-E series cards do not support sampling of AS ang BGP next hop information.
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
| Parameter | Description | Value |
|---|---|---|
as |
Specifies the AS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
as-tos |
Specifies the AS-ToS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, outbound interface index, and ToS. |
- |
bgp-nexthop-tos |
Specifies the BGP-nexthop-ToS aggregation. It classifies flows based on BGP next hop, source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
destination-prefix |
Specifies the destination-prefix aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, and outbound interface index. |
- |
destination-prefix-tos |
Specifies the destination-prefix-ToS aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, outbound interface index, and ToS. |
- |
index-tos |
Specifies the index-ToS aggregation. It classifies flows based on inbound interface index, outbound interface index, and ToS. |
- |
mpls-label |
Specifies the MPLS label aggregation. It classifies flows based on 10 key values, including the label value of each layer, EXP value matching each label, first label address, and stack bottom symbol of each label. |
- |
prefix |
Specifies the prefix aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, and outbound interface index. |
- |
prefix-tos |
Specifies the prefix-ToS aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, outbound interface index, and ToS. |
- |
protocol-port |
Specifies the protocol-port aggregation. It classifies flows based on protocol number, source port, and destination port. |
- |
protocol-port-tos |
Specifies the protocol-port-ToS aggregation. It classifies flows based on protocol number, source port, destination port, ToS, inbound interface index, and outbound interface index. |
- |
source-index-tos |
Specifies the inbound-interface-index-ToS aggregation. It classifies flows based on inbound interface index, ToS, and BGP next hop. |
- |
source-prefix |
Specifies the source-prefix aggregation. It classifies flows based on source AS number, source mask length, source prefix, and inbound interface index. |
- |
source-prefix-tos |
Specifies the source-prefix-ToS aggregation. It classifies flows based on source AS number, source mask length, source prefix, ToS, and inbound interface index. |
- |
vlan-id |
Specifies the VLAN aggregation. It classifies flows based on VLAN ID and inbound interface index. |
- |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 aggregation flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv4 aggregation flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display detailed statistics about flows aggregated based on protocol and port on the card.
<HUAWEI> display netstream cache ip aggregation protocol-port slot 1 verbose
NetStream cache information:
-------------------------------------------------------------------------------
Protocol SrcPort DstPort Direction Streams Packets Octets
-------------------------------------------------------------------------------
1 0 0 IN 1 5 530
1 0 2048 IN 1 2 204
1 0 0 OUT 1 2 212
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Protocol |
Protocol number of packets. |
SrcPort |
Source port number of packets. |
DstPort |
Destination port number of packets. |
Direction |
Packet sampling direction:
|
Streams |
Number of flows. |
Packets |
Number of packets. |
Octets |
Number of octets in packets. |
display netstream cache ip record
Function
The display netstream cache ip record command displays details about IPv4 flexible flow statistics on a card.
Format
display netstream cache ip record record-name [ { inbound | outbound } | destination interface interface-type interface-number | destination ip ip-address | destination port port-number | source interface interface-type interface-number | source ip ip-address | source port port-number | protocol protocol-type | tos tos-number ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of a flexible flow statistics template. |
It must be an existing template name on the device. |
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination ip ip-address |
Specifies the destination IP address of packets. |
- |
destination port port-number |
Specifies the destination port number of packets. |
The value is an integer that ranges from 0 to 65535. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source ip ip-address |
Indicates the source IP address of packets. |
- |
source port port-number |
Specifies the source port number of packets. |
The value is an integer that ranges from 0 to 65535. |
protocol protocol-type |
Specifies the protocol type of packets. |
The value is an integer that ranges from 0 to 255. |
tos tos-number |
Specifies the ToS value of packets. |
The value is an integer that ranges from 0 to 255. |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 flexible flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv4 flexible flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display IPv4 flexible flow statistics on the card.
<HUAWEI> display netstream cache ip record record1 slot 1 verbose
NOTE: L4 Info: Source Port:Destination Port:Protocol
TCP Flags: Ack, Flush, Push, Reset, Syn, Urgent
NetStream cache information:
-------------------------------------------------------------------------------
SrcIP SrcIf L4 Info ToS Direction
DstIP DstIf TCP Flags Packets Octets
Gre Key
-------------------------------------------------------------------------------
192.168.1.2 10GE1/0/3 0:0:253 0 IN
192.168.0.1 - 0:0:0:0:0:0 3427420 377016200
0
192.168.1.2 - 0:0:253 0 OUT
192.168.0.1 10GE1/0/3 0:0:0:0:0:0 3152090 346729900
0
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIP |
Source IP address of packets. |
SrcIf |
Inbound interface of packets. |
L4 Info |
Transport-layer information of packets. The format is source port number:destination port number:protocol type. |
ToS |
ToS value of packets. |
Direction |
Packet sampling direction:
|
DstIP |
Destination IP address of packets. |
DstIf |
Outbound interface of packets. |
TCP Flags |
TCP flag of packets. The format is ACK:Flush:Push:Reset:Syn:Urgent. |
Packets |
Number of packets. |
Octets |
Number of octets in packets. |
Gre Key |
Key value of GRE packets. NOTE:
Only the CE12800 that has the FD/FDA/FD1/FG/FG1/FD-M/FDA-M/SD series cards installed supports this parameter. This parameter is available in V200R019C10SPC900 and later versions. |
display netstream cache ip origin
Function
The display netstream cache ip origin command displays details about IPv4 original flow statistics on a card.
Format
display netstream cache ip origin [ { inbound | outbound } | destination interface interface-type interface-number | destination ip ip-address | destination port port-number | source interface interface-type interface-number | source ip ip-address | source port port-number | protocol protocol-type | tos tos-number ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination ip ip-address |
Specifies the destination IP address of packets. |
- |
destination port port-number |
Specifies the destination port number of packets. |
The value is an integer that ranges from 0 to 65535. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source ip ip-address |
Indicates the source IP address of packets. |
- |
source port port-number |
Specifies the source port number of packets. |
The value is an integer that ranges from 0 to 65535. |
protocol protocol-type |
Specifies the protocol type of packets. |
The value is an integer that ranges from 0 to 255. |
tos tos-number |
Specifies the ToS value of packets. |
The value is an integer that ranges from 0 to 255. |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 original flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv4 original flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display details about IPv4 original flow statistics on the card.
<HUAWEI> display netstream cache ip origin slot 1 verbose
NOTE: L4 Info: Source Port:Destination Port:Protocol
TCP Flags: Ack, Flush, Push, Reset, Syn, Urgent
NetStream cache information:
-------------------------------------------------------------------------------
SrcIf SrcIP/Mask DstIP/Mask L4 Info
ToS Direction SrcAS DstAS
DstIf TCP Flags SrcVlan DstVlan
MPLS Label1 MPLS Label2 MPLS Label3 MPLS Label4
NextHop BGPNextHop Octets Packets
Gre Key
-------------------------------------------------------------------------------
- 192.168.17.2/0 224.0.0.18/0 0:0:112
192 OUT 0 0
10GE1/0/22 0:0:0:0:0:0 0 0
0 0 0 0
0.0.0.0 0.0.0.0 13940 205
0
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIf |
Source interface of packets. |
SrcIP/Mask |
Source IP address and mask of packets. |
DstIP/Mask |
Destination IP address and mask of packets. |
L4 Info |
Transport-layer information of packets, including source port, destination port, and protocol type. |
ToS |
Service type of packets. |
Direction |
Packet sampling direction:
|
SrcAS |
Source AS number of packets. |
DstAS |
Destination AS number of packets. |
DstIf |
Destination interface of packets. |
TCP Flags |
TCP flag of packets, including ACK, Flush, Push, Reset, Syn, and Urgent. |
SrcVlan |
Source VLAN of packets. |
DstVlan |
Destination VLAN of packets. |
MPLS Label1 to MPLS Label4 |
MPLS label of packets. |
NextHop |
Next hop address. |
BGP NextHop |
BGP next hop address. |
Octets |
Number of octets in packets. |
Packets |
Number of packets. |
Gre Key |
Key value of GRE packets. NOTE:
Only the CE12800 that has the FD/FDA/FD1/FG/FG1/FD-M/FDA-M/SD series cards installed supports this parameter. This parameter is available in V200R019C10SPC900 and later versions. |
display netstream cache ipv6 aggregation
Function
The display netstream cache ipv6 aggregation command displays details about IPv6 aggregation flow statistics on a card.
Format
display netstream cache ipv6 aggregation { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos | vlan-id } slot slot-id [ chip chip-id ] [ verbose ]
The CE12800E does not support the as, as-tos, and bgp-nexthop-tos parameters when configured with ED-E, EG-E, and EGA-E series cards, because ED-E, EG-E, and EGA-E series cards do not support sampling of AS ang BGP next hop information.
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
| Parameter | Description | Value |
|---|---|---|
as |
Specifies the AS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
as-tos |
Specifies the AS-ToS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, outbound interface index, and ToS. |
- |
bgp-nexthop-tos |
Specifies the BGP-nexthop-ToS aggregation. It classifies flows based on BGP next hop, source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
destination-prefix |
Specifies the destination-prefix aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, and outbound interface index. |
- |
destination-prefix-tos |
Specifies the destination-prefix-ToS aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, outbound interface index, and ToS. |
- |
index-tos |
Specifies the index-ToS aggregation. It classifies flows based on inbound interface index, outbound interface index, and ToS. |
- |
prefix |
Specifies the prefix aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, and outbound interface index. |
- |
prefix-tos |
Specifies the prefix-ToS aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, outbound interface index, and ToS. |
- |
protocol-port |
Specifies the protocol-port aggregation. It classifies flows based on protocol number, source port, and destination port. |
- |
protocol-port-tos |
Specifies the protocol-port-ToS aggregation. It classifies flows based on protocol number, source port, destination port, ToS, inbound interface index, and outbound interface index. |
- |
source-prefix |
Specifies the source-prefix aggregation. It classifies flows based on source AS number, source mask length, source prefix, and inbound interface index. |
- |
source-prefix-tos |
Specifies the source-prefix-ToS aggregation. It classifies flows based on source AS number, source mask length, source prefix, ToS, and inbound interface index. |
- |
vlan-id |
Specifies the VLAN aggregation. It classifies flows based on VLAN ID and inbound interface index. |
- |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 aggregation flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv6 aggregation flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display detailed statistics about flows aggregated based on protocol and port on the card.
<HUAWEI> display netstream cache ipv6 aggregation protocol-port slot 1 verbose
NetStream cache information:
-------------------------------------------------------------------------------
Protocol SrcPort DstPort Direction Streams Packets Octets
-------------------------------------------------------------------------------
6 55274 179 IN 1 5 410
6 55275 179 IN 1 7 574
6 55276 179 IN 1 5 410
6 58291 179 OUT 1 4 328
6 58292 179 OUT 1 4 328
6 58293 179 OUT 1 5 410
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Protocol |
Protocol number of packets. |
SrcPort |
Source interface of packets. |
DstPort |
Destination interface of packets. |
Direction |
Packet sampling direction:
|
Streams |
Number of flows. |
Octets |
Number of packets. |
Packets |
Number of octets in packets. |
display netstream cache ipv6 record
Function
The display netstream cache ipv6 record command displays details about IPv6 flexible flow statistics on a card.
Format
display netstream cache ipv6 record record-name [ { inbound | outbound } | destination interface interface-type interface-number | destination ipv6 ipv6-address | destination port port-number | source interface interface-type interface-number | source ipv6 ipv6-address | source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of a flexible flow statistics template. |
It must be an existing template name on the device. |
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination ipv6 ipv6-address |
Specifies the destination IPv6 address of packets. |
- |
destination port port-number |
Specifies the destination port number of packets. |
The value is an integer that ranges from 0 to 65535. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source ipv6 ipv6-address |
Specifies the source IPv6 address of packets. |
- |
source port port-number |
Specifies the source port number of packets. |
The value is an integer that ranges from 0 to 65535. |
flowlabel flowlabel |
Specifies the flow label of packets. |
The value is an integer that ranges from 0 to 1048575. |
protocol protocol-type |
Specifies the protocol type of packets. |
The value is an integer that ranges from 0 to 255. |
tos tos-number |
Specifies the ToS value of packets. |
The value is an integer that ranges from 0 to 255. |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 flexible flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv6 flexible flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display IPv6 flexible flow statistics on the card.
<HUAWEI> display netstream cache ipv6 record test slot 1 verbose
NOTE: L4 Info: Source Port:Destination Port:Protocol
TCP Flags: Ack, Flush, Push, Reset, Syn, Urgent
NetStream cache information:
-------------------------------------------------------------------------------
SrcIP L4 Info TCP Flags
DstIP Direction ToS
SrcIf FlowLabel Octets
DstIf Packets
-------------------------------------------------------------------------------
fc00::2 0:0:59 0:0:0:0:0:0
fc00::1 IN 0
10GE1/0/3 0 693946000
- 6308600
fc00::2 0:0:59 0:0:0:0:0:0
fc00::1 OUT 0
- 0 647310510
10GE1/0/3 5884641
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIP |
Source IPv6 address of packets. |
L4 Info |
Transport-layer information of packets. The format is source port number : destination port number : protocol type. |
TCP Flags |
TCP flag of packets. The format is ACK : Flush : Push : Reset : Syn : Urgent. |
DstIP |
Destination IPv6 address of packets. |
Direction |
Packet sampling direction:
|
ToS |
ToS value of packets. |
SrcIf |
Inbound interface of packets. |
FlowLabel |
IPv6 flow label. |
Octets |
Number of octets in packets. |
DstIf |
Outbound interface of packets. |
Packets |
Number of packets. |
display netstream cache ipv6 origin
Function
The display netstream cache ipv6 origin command displays details about IPv6 original flow statistics on a card.
Format
display netstream cache ipv6 origin [ { inbound | outbound } | destination interface interface-type interface-number | destination ipv6 ipv6-address | destination port port-number | source interface interface-type interface-number | source ipv6 ipv6-address | source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination ipv6 ipv6-address |
Specifies the destination IPv6 address of packets. |
- |
destination port port-number |
Specifies the destination port number of packets. |
The value is an integer that ranges from 0 to 65535. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source ipv6 ipv6-address |
Specifies the source IPv6 address of packets. |
- |
source port port-number |
Specifies the source port number of packets. |
The value is an integer that ranges from 0 to 65535. |
flowlabel flowlabel |
Specifies the flow label of packets. |
The value is an integer that ranges from 0 to 1048575. |
protocol protocol-type |
Specifies the protocol type of packets. |
The value is an integer that ranges from 0 to 255. |
tos tos-number |
Specifies the ToS value of packets. |
The value is an integer that ranges from 0 to 255. |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 original flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on IPv6 original flows on the card.
Precaution
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display details about IPv6 original flow statistics on the card.
<HUAWEI> display netstream cache ipv6 origin slot 1 verbose
NOTE: L4 Info: Source Port:Destination Port:Protocol
TCP Flags: Ack, Flush, Push, Reset, Syn, Urgent
NetStream cache information:
-------------------------------------------------------------------------------
SrcIf TCP Flags SrcIP/Mask
DstIf ToS DstIP/Mask
L4 Info FlowLabel NextHop
SrcAS DstAS BGP NextHop
SrcVlan DstVlan Direction
Octets Packets
-------------------------------------------------------------------------------
- 1:0:1:0:0:0 FC00::1/64
10GE1/0/6 192 FC00::2/64
58060:179:6 0 FC00::2
0 0 ::
0 0 OUT
1261 13
10GE1/0/6 1:0:1:0:0:0 FC00::2/64
- 192 FC00::1/64
179:58060:6 0 ::
0 0 ::
0 0 IN
1261 13
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIf |
Source interface of packets. |
TCP Flags |
TCP flag of packets, including ACK, Flush, Push, Reset, Syn, and Urgent. |
SrcIP/Mask |
Source IPv6 address and mask of packets. |
DstIf |
Destination interface of packets. |
ToS |
Service type of packets. |
DstIP/Mask |
Destination IPv6 address and mask of packets. |
L4 Info |
Transport-layer information of packets, including source port, destination port, and protocol type. |
FlowLabel |
IPv6 flow label. |
NextHop |
Next hop address. |
SrcAS |
Source AS number of packets. |
DstAS |
Destination AS number of packets. |
BGP NextHop |
BGP next hop address. |
SrcVlan |
Source VLAN of packets. |
DstVlan |
Destination VLAN of packets. |
Direction |
Packet sampling direction:
|
Octets |
Number of octets in packets. |
Packets |
Number of packets. |
display netstream cache vxlan inner-ip record
Function
The display netstream cache vxlan inner-ip record command displays details about VXLAN flexible flow statistics on a card.
Format
display netstream cache vxlan inner-ip record record-name [ { inbound | outbound } | destination interface interface-type interface-number | destination ip ip-address | destination port port-number | source interface interface-type interface-number | source ip ip-address | source port port-number | protocol protocol-type | tos tos-number ] * slot slot-id [ chip chip-id ] [ verbose ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
CE12800E does not support the outbound parameter when configured with FD-X series cards.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of a flexible flow statistics template. |
It must be an existing template name on the switch. |
inbound |
Specifies incoming packets. |
- |
outbound |
Specifies outgoing packets. |
- |
destination interface interface-type interface-number |
Specifies the destination interface of packets. |
- |
destination ip ip-address |
Specifies the destination IP address in the original Ethernet frames in VXLAN packets. |
- |
destination port port-number |
Specifies the destination port number in the original Ethernet frames in VXLAN packets. |
The value is an integer that ranges from 0 to 65535. |
source interface interface-type interface-number |
Specifies the source interface of packets. |
- |
source ip ip-address |
Specifies the source IP address in the original Ethernet frames in VXLAN packets. |
- |
source port port-number |
Specifies the source port number in the original Ethernet frames in VXLAN packets. |
The value is an integer that ranges from 0 to 65535. |
protocol protocol-type |
Specifies the protocol type in the original Ethernet frames in VXLAN packets. |
The value is an integer that ranges from 0 to 255. |
tos tos-number |
Specifies the ToS value in the original Ethernet frames in VXLAN packets. |
The value is an integer that ranges from 0 to 255. |
slot slot-id |
Specifies the slot ID of a card. |
Set the value according to the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, VXLAN flexible flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
verbose |
Displays detailed information. |
- |
Usage Guidelines
Usage Scenario
This command displays real-time statistics on VXLAN flexible flows on the card.
Precautions
This command must be executed before the flows age out; otherwise, no information will be displayed.
Example
# Display brief information about VXLAN flexible flow statistics on the card.
<HUAWEI> display netstream cache vxlan inner-ip record record1 slot 1 NOTE: D: Direction(I: Inbound O: Outbound) P: Protocol T: ToS V:VLAN L4 Info: (Source Port,Destination Port) ------------------------------------------------------------------------------- D SrcIP SrcIf L4 Info Vni T DstIP DstIf P V SrcMac DstMac ------------------------------------------------------------------------------- O 192.168.1.69 - (1091,1024) 117 0 192.168.0.1 Eth-Trunk1 6 0 0009-1000-0045 0009-3000-0045 I 192.168.1.145 10GE1/0/1 (1167,1024) 193 0 192.168.0.1 - 6 0 0009-1000-0091 0009-3000-0091 I 192.168.1.105 10GE1/0/1 (1127,1024) 153 0 192.168.0.1 - 6 0 0009-1000-0069 0009-3000-0069 -------------------------------------------------------------------------------
Item |
Description |
|---|---|
D |
Packet sampling direction:
|
SrcIP |
Source IP address in the original Ethernet frames in VXLAN packets. |
SrcIf |
Inbound interface of packets. |
L4 Info |
Transport-layer information in the original Ethernet frames in VXLAN packets, including the source and destination port numbers. |
Vni |
VNI ID of packets. |
T |
ToS value in the original Ethernet frames in VXLAN packets. |
DstIP |
Destination IP address in the original Ethernet frames in VXLAN packets. |
DstIf |
Outbound interface of packets. |
P |
Protocol type in the original Ethernet frames in VXLAN packets. |
V |
VLAN ID in the original Ethernet frames in VXLAN packets. |
SrcMac |
Source MAC address in the original Ethernet frames in VXLAN packets. |
DstMac |
Destination MAC address in the original Ethernet frames in VXLAN packets. |
# Display detailed information about VXLAN flexible flow statistics on the card.
<HUAWEI> display netstream cache vxlan inner-ip record record1 slot 1 verbose
NOTE: L4 Info: Source Port:Destination Port:Protocol
TCP Flags: Ack, Flush, Push, Reset, Syn, Urgent
D: Direction
NetStream cache information:
-------------------------------------------------------------------------------
SrcIP SrcIf L4 Info ToS D Vni
DstIP DstIf TCP Flags Packets Octets
SrcMac DstMac VLAN
-------------------------------------------------------------------------------
192.168.1.31 - 1053:1024:6 0 OUT 79
192.168.0.1 Eth-Trunk1 1:0:0:0:0:0 1 1804
0009-1000-001f 0009-3000-001f 0
192.168.1.15 10GE1/0/1 1037:1024:6 0 IN 63
192.168.0.1 - 1:0:0:0:0:0 1 3398
0009-1000-000f 0009-3000-000f 0
192.168.1.21 10GE1/0/1 1043:1024:6 0 IN 69
192.168.0.1 - 1:0:0:0:0:0 1 520
0009-1000-0015 0009-3000-0015 0
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
SrcIP |
Source IP address in the original Ethernet frames in VXLAN packets. |
SrcIf |
Inbound interface of packets. |
L4 Info |
Transport-layer information in the original Ethernet frames in VXLAN packets, including the source and destination port numbers and protocol type. |
ToS |
ToS value in the original Ethernet frames in VXLAN packets. |
D |
Packet sampling direction:
|
Vni |
VNI ID of packets. |
DstIP |
Destination IP address in the original Ethernet frames in VXLAN packets. |
DstIf |
Outbound interface of packets. |
TCP Flags |
TCP flags in the original Ethernet frames in VXLAN packets, including ACK, Flush, Push, Reset, Syn, and Urgent. |
Packets |
Number of packets. |
Octets |
Number of octets in packets. |
SrcMac |
Source MAC address in the original Ethernet frames in VXLAN packets. |
DstMac |
Destination MAC address in the original Ethernet frames in VXLAN packets. |
VLAN |
VLAN ID in the original Ethernet frames in VXLAN packets. |
display netstream export ethernet template
Function
The display netstream export ethernet template command displays export template information in which the export version for Layer 2 NetStream flow statistics is set to V9.
Usage Guidelines
Usage Scenario
When the export version for Layer 2 NetStream flow statistics is set to V9, the template must be exported to the NDA. This command displays template configuration. If the NMS fails to parse flows, this command allows you to check whether template exporting is normal.
Precaution
If no template is exported, no information is displayed for the template.
Example
# Display export template statistics.
<HUAWEI> display netstream export ethernet template
------------------------------------------------------
TemplateName Success Failed
------------------------------------------------------
origin 34696 0
------------------------------------------------------
Item |
Description |
|---|---|
TemplateName |
Template type. |
Success |
Number of times a template is successfully exported. |
Failed |
Number of times a template failed to be exported. |
display netstream export ip template
Function
The display netstream export ip template command displays export template information in which the export version for IPv4 flow statistics is set to V9.
Usage Guidelines
Usage Scenario
When the export version for IPv4 flow statistics is set to V9, the template must be exported to the NDA. If the NMS fails to parse flows, this command allows you to check whether template exporting is normal.
Precaution
If no template is exported, no information is displayed for the template.
Example
# Display export template statistics.
<HUAWEI> display netstream export ip template
------------------------------------------------------
TemplateName Success Failed
------------------------------------------------------
origin 69 0
as 22 0
as-tos 15 0
protocol-port 14 0
protocol-port-tos 14 0
source-prefix 14 0
source-prefix-tos 14 0
destination-prefix 14 0
destination-prefix-tos 14 0
prefix 13 0
prefix-tos 14 0
mpls-label 14 0
vlan-id 14 0
bgp-nexthop-tos 14 0
index-tos 14 0
source-index-tos 14 0
------------------------------------------------------
Item |
Description |
|---|---|
TemplateName |
Template type. |
Success |
Number of times a template is successfully exported. |
Failed |
Number of times a template failed to be exported. |
display netstream export ipv6 template
Function
The display netstream export ipv6 template command displays export template information in which the export version for IPv6 flow statistics is set to V9.
Usage Guidelines
Usage Scenario
When the export version for IPv6 flow statistics is set to V9, the template must be exported to the NDA. If the NMS fails to parse flows, this command allows you to check whether template exporting is normal.
Precaution
If no template is exported, no information is displayed for the template.
Example
# Display export template statistics.
<HUAWEI> display netstream export ipv6 template
------------------------------------------------------
TemplateName Success Failed
------------------------------------------------------
origin 8 0
as 12 0
as-tos 6 0
protocol-port 8 0
protocol-port-tos 8 0
source-prefix 8 0
source-prefix-tos 6 0
destination-prefix 4 0
destination-prefix-tos 5 0
prefix 2 0
prefix-tos 6 0
vlan-id 6 0
bgp-nexthop-tos 6 0
index-tos 6 0
------------------------------------------------------
Item |
Description |
|---|---|
TemplateName |
Template type. |
Success |
Number of times a template is successfully exported. |
Failed |
Number of times a template failed to be exported. |
display netstream export vxlan inner-ip template
Function
The display netstream export vxlan inner-ip template command displays template information in which the export version for VXLAN flexible flow statistics is V9.
Usage Guidelines
Usage Scenario
When the export version for VXLAN flexible flow statistics is set to V9, the template must be exported to the NDA. If the NMS fails to parse flows, this command allows you to check whether template exporting is normal.
Precautions
If a template does not output information, no information is displayed for the template.
Example
# Display export template statistics.
<HUAWEI> display netstream export vxlan inner-ip template
------------------------------------------------------
TemplateName Success Failed
------------------------------------------------------
origin 38 0
------------------------------------------------------
Item |
Description |
|---|---|
TemplateName |
Template type. |
Success |
Number of times a template is successfully exported. |
Failed |
Number of times a template failed to be exported. |
display netstream filter applied-record
Function
The display netstream filter applied-record command displays the delivery status of ACLs for filtering NetStream packets.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Parameters
Parameter |
Description |
Value |
|---|---|---|
interface-type interface-name |
Specifies the type and number of an interface. |
- |
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the actual configuration. |
Usage Guidelines
Usage Scenario
When ACLs are used to filter the traffic you are interested in, you can run the display netstream filter applied-record command to check the ACL delivery status.
Precautions
None
Example
# Display the delivery status of ACLs used to filter NetStream packets on Eth-Trunk 55 in slot 1.
<HUAWEI> display netstream filter applied-record interface eth-trunk 55 Slot 1
------------------------------------------------------------------------------------------------
ACL Number Packet Type Filter Value Rule ACL Entry Count State
------------------------------------------------------------------------------------------------
3002 IPv4 -- 20 1 Success
3002 IPv6 -- 25 1 Success
3002 GRE -- 30 168 Success
3002 VXLAN -- 25 0 Processing
3002 VXLAN VNI 333 30 0 Fail(2)
------------------------------------------------------------------------------------------------
Failure Code:
1----This ACL rule contains unsupported match conditions.
2----Insufficient ACL resources.
Item |
Description |
|---|---|
ACL Number |
Number of an ACL. |
Packet Type |
Type of packets to be matched by an ACL rule. |
Filter Value |
VNI value. |
Rule |
Number of an ACL rule. |
ACL Entry Count |
Number of delivered ACL rules. |
State |
Delivery status of an ACL rule.
|
Failure Code |
Reason why an ACL rule fails to be delivered on a specified device.
|
display netstream statistics ethernet
Function
The display netstream statistics ethernet command displays Layer 2 NetStream flow statistics.
Format
display netstream statistics ethernet slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, Layer 2 flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
Usage Guidelines
Usage Scenario
This command displays Layer 2 NetStream flow statistics on the device, including the statistics reset time, statistics on packets of different lengths, flow aggregation method, and statistics on different types of flows.
Example
# Display Layer 2 statistics on the card.
<HUAWEI> display netstream statistics ethernet slot 1
Time statistics were last cleared: -
-------------------------------------------------------------------------------
Packet Length : Number
-------------------------------------------------------------------------------
1 ~ 64 : 0
65 ~ 128 : 93
129 ~ 256 : 0
257 ~ 512 : 30
513 ~ 1024 : 0
1025 ~ 1500 : 0
longer than 1500 : 0
-------------------------------------------------------------------------------
StreamType
Current Aged Created Exported Exported
(streams) (streams) (streams) (streams) (Packets)
-------------------------------------------------------------------------------
ethernet
2 25 27 25 23
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Time statistics were last cleared |
Last time when statistics were deleted. |
Packet Length |
Packet length list. |
Number |
Number of packets of different lengths. |
StreamType |
Traffic type. |
Current (streams) |
Number of active flows. |
Aged (streams) |
Number of aged flows. |
Created (streams) |
Number of created flows. |
Exported (Packets) |
Number of exported flows. |
Exported (streams) |
Number of exported packets. |
display netstream statistics ip
Format
display netstream statistics ip slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
Usage Guidelines
This command displays IPv4 flow statistics on the card, including the statistics reset time, statistics on packets of different lengths, flow aggregation method, and statistics on different types of flows.
Example
# Display IPv4 flow statistics on the card. (CE12800 Switches Excluding the FD/FDA/FD1/FG/FG1/FD-M/FDA-M/SD series cards.)
<HUAWEI> display netstream statistics ip slot 1
Time statistics were last cleared: -
-------------------------------------------------------------------------------
Packet Length : Number
-------------------------------------------------------------------------------
1 ~ 64 : 15
65 ~ 128 : 14
129 ~ 256 : 1
257 ~ 512 : 0
513 ~ 1024 : 0
1025 ~ 1500 : 0
longer than 1500 : 0
-------------------------------------------------------------------------------
StreamType
Current Aged Created Exported Exported
(streams) (streams) (streams) (streams) (Packets)
-------------------------------------------------------------------------------
origin
0 0 0 0 0
-------------------------------------------------------------------------------
as
0 0 0 0 0
-------------------------------------------------------------------------------
as-tos
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port-tos
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
prefix
0 0 0 0 0
-------------------------------------------------------------------------------
prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
mpls-label
0 0 0 0 0
-------------------------------------------------------------------------------
vlan-id
0 0 0 0 0
-------------------------------------------------------------------------------
bgp-nexthop-tos
0 0 0 0 0
-------------------------------------------------------------------------------
index-tos
0 0 0 0 0
-------------------------------------------------------------------------------
source-index-tos
0 0 0 0 0
-------------------------------------------------------------------------------
record1
2 2 4 2 2
-------------------------------------------------------------------------------
# Display IPv4 flow statistics on the card. (The CE12800 that has the FD/FDA/FD1/FG/FG1/FD-M/FDA-M/SD series cards installed.)
<HUAWEI> display netstream statistics ip slot 1
Time statistics were last cleared: -
-------------------------------------------------------------------------------
Packet Length : Number
-------------------------------------------------------------------------------
1 ~ 64 : 15
65 ~ 128 : 14
129 ~ 256 : 1
257 ~ 512 : 0
513 ~ 1024 : 0
1025 ~ 1500 : 0
longer than 1500 : 0
-------------------------------------------------------------------------------
StreamType
Current Aged Created Exported Exported
(streams) (streams) (streams) (streams) (Packets)
-------------------------------------------------------------------------------
origin
0 0 0 0 0
-------------------------------------------------------------------------------
origin-gre
0 0 0 0 0
-------------------------------------------------------------------------------
as
0 0 0 0 0
-------------------------------------------------------------------------------
as-tos
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port-tos
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
prefix
0 0 0 0 0
-------------------------------------------------------------------------------
prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
mpls-label
0 0 0 0 0
-------------------------------------------------------------------------------
vlan-id
0 0 0 0 0
-------------------------------------------------------------------------------
bgp-nexthop-tos
0 0 0 0 0
-------------------------------------------------------------------------------
index-tos
0 0 0 0 0
-------------------------------------------------------------------------------
source-index-tos
0 0 0 0 0
-------------------------------------------------------------------------------
record1
2 2 4 2 2
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Time statistics were last cleared |
Last time when statistics were deleted. |
Packet Length |
Packet length list. |
Number |
Number of packets of different lengths. |
StreamType |
Traffic type. |
Current (streams) |
Number of active flows. |
Aged (streams) |
Number of aged flows. |
Created (streams) |
Number of created flows. |
Exported (streams) |
Number of exported flows. |
Exported (Packets) |
Number of exported packets. |
display netstream statistics ipv6
Format
display netstream statistics ipv6 slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
Usage Guidelines
This command displays IPv6 flow statistics on the card, including the statistics reset time, statistics on packets of different lengths, flow aggregation method, and statistics on different types of flows.
Example
# Display IPv6 flow statistics on the card.
<HUAWEI> display netstream statistics ipv6 slot 1
Time statistics were last cleared: 2013-09-27 17:08:08
-------------------------------------------------------------------------------
Packet Length : Number
-------------------------------------------------------------------------------
1 ~ 64 : 0
65 ~ 128 : 8
129 ~ 256 : 0
257 ~ 512 : 0
513 ~ 1024 : 0
1025 ~ 1500 : 0
longer than 1500 : 0
-------------------------------------------------------------------------------
StreamType
Current Aged Created Exported Exported
(streams) (streams) (streams) (streams) (Packets)
-------------------------------------------------------------------------------
origin
5 1 5 0 0
-------------------------------------------------------------------------------
as
0 0 0 0 0
-------------------------------------------------------------------------------
as-tos
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port
0 0 0 0 0
-------------------------------------------------------------------------------
protocol-port-tos
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
source-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix
0 0 0 0 0
-------------------------------------------------------------------------------
destination-prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
prefix
0 0 0 0 0
-------------------------------------------------------------------------------
prefix-tos
0 0 0 0 0
-------------------------------------------------------------------------------
vlan-id
0 0 0 0 0
-------------------------------------------------------------------------------
bgp-nexthop-tos
0 0 0 0 0
-------------------------------------------------------------------------------
index-tos
0 0 0 0 0
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Time statistics were last cleared |
Last time when statistics were deleted. |
Packet Length |
Packet length list. |
Number |
Number of packets of different lengths. |
StreamType |
Traffic type. |
Current (streams) |
Number of active flows. |
Aged (streams) |
Number of aged flows. |
Created (streams) |
Number of created flows. |
Exported (streams) |
Number of exported flows. |
Exported (Packets) |
Number of exported packets. |
display netstream statistics vxlan inner-ip
Function
The display netstream statistics vxlan inner-ip command displays VXLAN flexible flow statistics.
Format
display netstream statistics vxlan inner-ip slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
Set the value according to the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, VXLAN flexible flow statistics in the specified slot are displayed. |
The value depends on the device configuration. |
Usage Guidelines
This command displays VXLAN flexible flow statistics on the card, including the statistics reset time, statistics on packets of different lengths, traffic statistics collection method, and statistics on different types of flows.
Example
# Display VXLAN flexible flow statistics on the card.
<HUAWEI> display netstream statistics vxlan inner-ip slot 1
Time statistics were last cleared: -
-------------------------------------------------------------------------------
Packet Length : Number
-------------------------------------------------------------------------------
1 ~ 64 : 0
65 ~ 128 : 3480368
129 ~ 256 : 0
257 ~ 512 : 0
513 ~ 1024 : 0
1025 ~ 1500 : 0
longer than 1500 : 0
-------------------------------------------------------------------------------
StreamType
Current Aged Created Exported Exported
(streams) (streams) (streams) (streams) (Packets)
-------------------------------------------------------------------------------
VXLAN-record
0 60 60 60 6
-------------------------------------------------------------------------------
Item |
Description |
|---|---|
Time statistics were last cleared |
Last time when statistics were deleted. |
Packet Length |
Packet length list. |
Number |
Number of packets of different lengths. |
StreamType |
Flow type. |
Current (streams) |
Number of active flows. |
Aged (streams) |
Number of flows aged out. |
Created (streams) |
Number of created flows. |
Exported (streams) |
Number of exported flows. |
Exported (Packets) |
Number of sent packets. |
display netstream top-talkers ip
Function
The display netstream top-talkers ip command displays the Top Talkers statistics and sorting results in a NetStream Top Talkers template.
Format
display netstream top-talkers talker-name ip [ interface interface-type interface-number ] slot slot-id
Parameters
| Parameter | Description | Value |
|---|---|---|
| talker-name | Displays Top Talkers statistics and sorting results in the specified NetStream Top Talkers template. | The value must be the name of an existing NetStream Top Talkers template. |
| interface interface-type interface-number | Displays Top Talkers statistics and sorting results on the specified interface where a NetStream Top Talkers template is applied. interface-type interface-number specifies the type and number of an interface. |
- |
| slot slot-id | Displays Top Talkers statistics and sorting results in the specified slot. |
- |
Usage Guidelines
The Top Talker statistics and sorting results in a NetStream Top Talkers template can be queried by running the display netstream top-talkers ip command only after the NetStream Top Talkers function is started for a period of time. This period equals the traffic statistics collection period in the NetStream Top Talkers template and is configured using the cache-timeout command.
Example
# Display the Top Talkers statistics and sorting results in the NetStream Top Talkers template test on 10GE1/0/1.
<HUAWEI> display netstream top-talkers test ip interface 10ge 1/0/1 slot 1
Top-Talkers Name : test
Flow Type : IPv4
Top Number : 200
Sort-By : PACKETS
Cache-Timeout : 1200000
BeginCache Time : 2014-12-10 09:59:44
match DstIP/Mask : 10.1.3.2/255.255.255.0
-------------------------------------------------------------------------------
SrcIP SrcPort Bytes BPS BPM
DstIP DstPort Packets PPS PPM
Interface Protocol Direction
-------------------------------------------------------------------------------
10.1.1.2 0 62762800 2096200 125777100
10.1.3.2 0 729800 24300 1462500
10GE1/0/1 114 Inbound
10.1.2.2 0 61894200 2067200 124036400
10.1.3.2 0 719700 24000 1442200
10GE1/0/1 114 Inbound
-------------------------------------------------------------------------------
2 of 200 top talkers shown. 2 flows processed.
-------------------------------------------------------------------------------
| Item | Description |
|---|---|
| Top-Talkers Name | Name of a NetStream Top Talkers template. To set the template name, run the netstream top-talkers ip (system view) command. |
| Flow Type | Packet type. Currently, IPv4 packets are supported. |
| Top Number | Number of Top Talkers that can be recorded in a NetStream Top Talkers template. To set the number of Top Talkers that can be recorded in a NetStream Top Talkers template, run the top number command. |
| Sort-By | Top Talkers sorting order in a NetStream Top Talkers template. To set the Top Talkers sorting order in a NetStream Top Talkers template, run the sort-by command. |
| Cache-Timeout | Top Talkers statistics collection period in a NetStream Top Talkers template. To set the Top Talkers statistics collection period in a NetStream Top Talkers template, run the cache-timeout command. |
| BeginCache Time | Time when the NetStream Top Talkers function is started. To start the NetStream Top Talkers function on schedule, run the starting time command. To start the NetStream Top Talkers function immediately, run the netstream top-talkers ip starting command. |
| match DstIP/Mask | Traffic filtering keyword used in a NetStream Top Talkers template. To set the traffic filtering keyword, run the match ip (NetStream Top Talkers template view) command. |
| SrcIP | Source IP address of a Top Talker. |
| SrcPort | Source port number of a Top Talker. |
| Bytes | Number of bytes of a Top Talker. |
| BPS | Number of bytes of a Top Talker transmitted per second. |
| BPM | Number of bytes of a Top Talker transmitted per minute. |
| DstIP | Destination IP address of a Top Talker. |
| DstPort | Destination port number of a Top Talker. |
| Packets | Number of packets of a Top Talker. |
| PPS | Number of packets of a Top Talker transmitted per second. |
| PPM | Number of packets of a Top Talker transmitted per minute. |
| Interface | Name of the interface where a NetStream Top Talkers template is applied. |
| Protocol | Protocol number of packets. |
| Direction | Direction of a Top Talker:
|
enable
Function
The enable command enables the aggregation function in the aggregation view.
The undo enable command disables the aggregation function in the aggregation view.
By default, the aggregation function is disabled.
export version
Function
The export version command configures the version of exported packets carrying aggregation flow statistics.
The undo export version command restores the default setting.
In the following aggregation modes, the default export version of aggregation flow statistics is V8:
- as
- as-tos
- destination-prefix
- destination-prefix-tos
- prefix
- prefix-tos
- protocol-port
- protocol-port-tos
- source-prefix
- source-prefix-tos
Parameters
Parameter |
Description |
Value |
|---|---|---|
8 |
Sets the version number of exported packets carrying aggregation flow statistics to 8. |
- |
9 |
Sets the version number of exported packets carrying aggregation flow statistics to V9. |
- |
Usage Guidelines
Usage Scenario
The NDE exports NetStream flow statistics to the NSC. The version of exported packets must be the same as that configured on the NSC so that the NSC can parse the exported packets.
The format of exported packets in V8 is fixed and is not easy to expand. The format of exported packets in V9 is defined in templates and is easy to combine or expand. The statistics are exported more flexibly.
V9 is supported by most NSCs for its advantages. It is recommended that you set the version of exported packets carrying aggregation flow statistics to V9.
Precaution
When collecting statistics about NetStream aggregation flows, the version of exported packets is the same as that configured on the NMS. If the interface indexes in the exported packets need to be extended to 32 bits, the version must be set to V9.
In the following aggregation methods, the version can be set to V8 or V9:
- as
- as-tos
- destination-prefix
- destination-prefix-tos
- prefix
- prefix-tos
- protocol-port
- protocol-port-tos
- source-prefix
- source-prefix-tos
In the following aggregation methods, the version must be set to V9 and the export version command is invalid:
- bgp-nexthop-tos
- index-tos
- mpls-label
- source-index-tos
- vlan-id
In IPv6 aggregation, the version must be set to V9 and the export version command is invalid.
mask
Function
The mask command sets the aggregation mask length.
The undo mask command restores the default setting.
By default, the aggregation mask in IPv4 aggregation view is 24 and in IPv6 aggregation view is 64.
Format
mask { source | destination } minimum mask-length
undo mask { source | destination } [ minimum mask-length ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| source | Indicates the aggregation mask of the source address. It is used in the following aggregation methods: prefix, prefix-ToS, source-prefix, and source-prefix-ToS. | - |
| destination | Indicates the aggregation mask of the destination address. It is used in the following aggregation methods: prefix, prefix-ToS, destination-prefix, or destination-prefix-ToS. | - |
| mask-length | Specifies the aggregation mask length. | The value is an integer.
|
Usage Guidelines
Usage Scenario
Setting a long aggregation mask can collect refined NetStream statistics.
Setting a short aggregation mask can collect brief NetStream statistics.
Precaution
Aggregation masks are applied to six aggregation methods: destination-prefix, destination-prefix-tos, prefix, prefix-tos, source-prefix, and source-prefix-tos.
Example
# Set the mask length for the source-prefix aggregation in the IPv4 aggregation view to 22.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip source-prefix [*HUAWEI-netstream-aggregation-srcpre] mask source minimum 22
# Set the mask length for the source-prefix aggregation in the IPv6 aggregation view to 66.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ipv6 source-prefix [*HUAWEI-netstream-aggregation-ipv6-srcpre] mask source minimum 66
match inner-ip
Function
The match inner-ip command configures aggregation keywords in a VXLAN flexible flow statistics template.
The undo match inner-ip command deletes aggregation keywords from a VXLAN flexible flow statistics template.
By default, no aggregation keyword is configured in a VXLAN flexible flow statistics template.
Format
match inner-ip { destination-address | destination-port | tos | protocol | source-address | source-port | source-mac | destination-mac | cvlan }
undo match inner-ip { destination-address | destination-port | tos | protocol | source-address | source-port | source-mac | destination-mac | cvlan }
Only the CE12800 supports the source-mac, destination-mac, and cvlan parameters.
Parameters
Parameter |
Description |
Value |
|---|---|---|
destination-address |
Indicates to aggregate flows based on the destination IP address in original Ethernet frames. |
- |
destination-port |
Indicates to aggregate flows based on the destination port number in original Ethernet frames. |
- |
tos |
Indicates to aggregate flows based on the ToS value in original Ethernet frames. |
- |
protocol |
Indicates to aggregate flows based on the protocol type in original Ethernet frames. |
- |
source-address |
Indicates to aggregate flows based on the source IP address in original Ethernet frames. |
- |
source-port |
Indicates to aggregate flows based on the source port number in original Ethernet frames. |
- |
source-mac |
Indicates to aggregate flows based on the source MAC address in original Ethernet frames. |
- |
destination-mac |
Indicates to aggregate flows based on the destination MAC address in original Ethernet frames. |
- |
cvlan |
Indicates to aggregate flows based on the VLAN ID in original Ethernet frames. |
- |
Usage Guidelines
Usage Scenario
During exporting of VXLAN flexible flow statistics, you can run the match inner-ip command to configure aggregation keywords in a flexible flow statistics template. The aggregation keywords refer to the destination IP address, destination port number, ToS, protocol type, source IP address, and source port number in the original Ethernet frames encapsulated in VXLAN packets.
Prerequisites
The netstream record vxlan inner-ip (system view) command has been executed to create a VXLAN flexible flow statistics template.
Precautions
When you run the match inner-ip command to configure the aggregation keywords, only one keyword can be configured each time. If you run this command multiple times in the same view, a set of aggregation keywords is configured. If a template has been applied to an interface, you cannot modify or delete aggregation keywords from the template.
match ip
Function
The match ip command configures aggregation keywords in an IPv4 flexible flow statistics template.
The undo match ip command deletes aggregation keywords from an IPv4 flexible flow statistics template.
By default, no aggregation keyword is configured in an IPv4 flexible flow statistics template.
Format
match ip { destination-address | destination-port | tos | protocol | source-address | source-port }
undo match ip { destination-address | destination-port | tos | protocol | source-address | source-port }
Parameters
Parameter |
Description |
Value |
|---|---|---|
| destination-address | Indicates that flows are aggregated based on destination addresses. |
- |
| destination-port | Indicates that flows are aggregated based on destination ports. |
- |
| tos | Indicates that flows are aggregated based on ToS fields. |
- |
| protocol | Indicates that flows are aggregated based on protocol types. |
- |
| source-address | Indicates that flows are aggregated based on source addresses. |
- |
| source-port | Indicates that flows are aggregated based on source ports. |
- |
Usage Guidelines
Usage Scenario
During NetStream implementation, you can run the match ip command to configure aggregation keywords in a flexible flow statistics template.
Prerequisites
The netstream record ip (system view) command has been executed to create an IPv4 flexible flow statistics template.
Precautions
When you run the match ip command to configure the aggregation keywords, only one keyword can be configured each time. If you run this command multiple times in the same view, a set of multiple aggregation keywords is configured. If a template has been applied to an interface, you cannot modify or delete aggregation keywords from the template.
match ip (NetStream Top Talkers template view)
Function
The match ip command sets keywords in a NetStream Top Talkers template to filter traffic.
The undo match ip command deletes the keywords in a NetStream Top Talkers template.
By default, no keyword is specified in a NetStream Top Talkers template.
Format
match ip { source-address ip-address [ mask ] | destination-address ip-address [ mask ] | nexthop-address ip-address [ mask ] | source-port { min port-number | max port-number } | destination-port { min port-number | max port-number } | source-as as-number [ origin | peer ] | destination-as as-number [ origin | peer ] | tos tos-value | dscp dscp-value | precedence precedence-value | protocol { protocol-number | tcp | udp } | packet-range { min minimum-range | max maximum-range } | byte-range { min minimum-range | max maximum-range } }
undo match ip { source-address [ ip-address [ mask ] ] | destination-address [ ip-address [ mask ] ] | nexthop-address [ ip-address [ mask ] ] | source-port { min [ port-number ] | max [ port-number ] } | destination-port { min [ port-number ] | max [ port-number ] } | source-as [ as-number ] [ origin | peer ] | destination-as [ as-number ] [ origin | peer ] | tos [ tos-value ] | dscp [ dscp-value ] | precedence [ precedence-value ] | protocol [ protocol-number | tcp | udp ] | packet-range { min [ minimum-range ] | max [ maximum-range ] } | byte-range { min [ minimum-range ] | max [ maximum-range ] } }
Parameters
Parameter |
Description |
Value |
|---|---|---|
source-address ip-address [ mask ] |
Filters traffic based on a specified source IPv4 address. |
The value of ip-address is in dotted decimal notation. The value of mask is in dotted decimal notation or decimal notation. |
destination-address ip-address [ mask ] |
Filters traffic based on a specified destination IPv4 address. |
The value of ip-address is in dotted decimal notation. The value of mask is in dotted decimal notation or decimal notation. |
nexthop-address ip-address [ mask ] |
Filters traffic based on a specified next-hop IPv4 address. |
The value of ip-address is in dotted decimal notation. The value of mask is in dotted decimal notation or decimal notation. |
source-port { min port-number | max port-number } |
Filters traffic based on a specified source port number range. min port-number specifies the minimum source port number. That is, the traffic of which the source port number is equal to or larger than this value is filtered. max port-number specifies the maximum source port number. That is, the traffic of which the source port number is equal to or smaller than this value is filtered. The value of max must be equal to or larger than the value of min. |
The value is an integer that ranges from 1 to 65535. |
destination-port { min port-number | max port-number } |
Filters traffic based on a specified destination port number range. min port-number specifies the minimum destination port number. That is, the traffic of which the destination port number is equal to or larger than this value is filtered. max port-number specifies the maximum destination port number. That is, the traffic of which the destination port number is equal to or smaller than this value is filtered. The value of max must be equal to or larger than the value of min. |
The value is an integer that ranges from 1 to 65535. |
source-as as-number [ origin | peer ] |
Filters traffic based on a specified source AS. origin specifies the source AS number as the start source AS number. peer specifies the source AS number as the peer source AS number. |
The value is an integer that ranges from 1 to 65535. By default, traffic is filtered based on the specified start source AS number. |
destination-as as-number [ origin | peer ] |
Filters traffic based on a specified destination AS. origin specifies the destination AS number as the start destination AS number. peer specifies the destination AS number as the peer destination AS number. |
The value is an integer that ranges from 1 to 65535. By default, traffic is filtered based on the specified start destination AS number. |
tos tos-value |
Filters traffic based on a specified ToS field. |
The value is an integer that ranges from 0 to 255. |
dscp dscp-value |
Filters traffic based on a specified DSCP field. |
The value is an integer that ranges from 0 to 63. |
precedence precedence-value |
Filters traffic based on IP precedence of IPv4 packets. |
The value is an integer that ranges from 0 to 7. |
protocol { protocol-number | tcp | udp } |
Filters traffic based on a specified protocol type. |
The value is an integer that ranges from 1 to 255. The protocol numbers of TCP and UDP are 6 and 17 respectively. |
packet-range { min minimum-range | max maximum-range } |
Filters traffic based on the packet number range. min minimum-range specifies the minimum number of packets. That is, the traffic in which the number of packets of the same type is equal to or larger than this value is filtered. max maximum-range specifies the maximum number of packets. That is, the traffic in which the number of packets of the same type is equal to or smaller than this value is filtered. The value of max must be equal to or larger than the value of min. |
The value is an integer that ranges from 1 to 4294967295. |
byte-range { min minimum-range | max maximum-range } |
Filters traffic based on the byte number range. min minimum-range specifies the minimum number of bytes. That is, the traffic in which the number of bytes of the same packet type is equal to or larger than this value is filtered. max maximum-range specifies the maximum number of bytes. That is, the traffic in which the number of bytes of the same packet type is equal to or smaller than this value is filtered. The value of max must be equal to or larger than the value of min. |
The value is an integer that ranges from 1 to 4294967295. |
Usage Guidelines
Usage Scenario
To specify keywords in a NetStream Top Talkers template to filter traffic, run the match ip command. After you specify the keywords, the device filters traffic based on the specified keywords, collects traffic statistics, sorts the traffic, and displays the statistics and sorting results.
Prerequisites
A NetStream Top Talkers template has been created using the netstream top-talkers ip (system view) command.
Precautions
Running the match ip command once can specify only one keyword. If the command is run multiple times in the same view, traffic is filtered based on multiple keywords.
The keywords tos, dscp, and precedence cannot be configured together in a NetStream Top Talkers template; otherwise, the filtering result may be unexpected. For example, if you specify tos, and then specify dscp, the device filters traffic based on the DSCP field of packets.
Set both the maximum and minimum values of each keyword. That is, specify that a NetStream Top Talkers template filters the traffic of which the source port number, destination port number, number of packets, or number of bytes ranges from the minimum value to the maximum value.
Set only the minimum value of each keyword. That is, specify that a NetStream Top Talkers template filters the traffic of which the source port number, destination port number, number of packets, or number of bytes is equal to or larger than the minimum value.
Set only the maximum value of each keyword. That is, specify that a NetStream Top Talkers template filters the traffic of which the source port number, destination port number, number of packets, or number of bytes is equal to or smaller than the maximum value.
match ipv6
Function
The match ipv6 command configures aggregation keywords in an IPv6 flexible flow statistics template.
The undo match ipv6 command deletes aggregation keywords from an IPv6 flexible flow statistics template.
By default, no aggregation keyword is configured in an IPv6 flexible flow statistics template.
Format
match ipv6 { destination-address | destination-port | tos | protocol | source-address | source-port | flow-label }
undo match ipv6 { destination-address | destination-port | tos | protocol | source-address | source-port | flow-label }
Parameters
Parameter |
Description |
Value |
|---|---|---|
destination-address |
Indicates that flows are aggregated based on destination addresses. |
- |
destination-port |
Indicates that flows are aggregated based on destination ports. |
- |
tos |
Indicates that flows are aggregated based on ToS fields. |
- |
protocol |
Indicates that flows are aggregated based on protocol types. |
- |
source-address |
Indicates that flows are aggregated based on source addresses. |
- |
source-port |
Indicates that flows are aggregated based on source ports. |
- |
flow-label |
Indicates that flows are aggregated based on flow labels. |
- |
Usage Guidelines
Usage Scenario
You can run the match ipv6 command to configure aggregation keywords in a flexible flow statistics template.
Prerequisites
The netstream record ipv6 (system view) command has been executed to create an IPv6 flexible flow statistics template.
Precaution
When you run the match ipv6 command to configure the aggregation keywords, only one keyword can be configured each time. If you run this command multiple times in the same view, a set of multiple aggregation keywords is configured. If a template has been applied to an interface, you cannot modify or delete aggregation keywords from the template.
netstream aggregation ip
Function
The netstream aggregation ip command configures the IPv4 aggregation method and displays the IPv4 aggregation view.
The undo netstream aggregation ip command deletes the IPv4 aggregation method.
By default, no IPv4 aggregation method is configured.
Format
netstream aggregation ip { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | mpls-label | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos | source-index-tos | vlan-id }
undo netstream aggregation ip { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | mpls-label | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos | source-index-tos | vlan-id }
The CE12800E does not support the mpls-label parameter, because the CE12800E does not support MPLS.
The CE12800E does not support the as, as-tos, and bgp-nexthop-tos parameters when configured with ED-E, EG-E, and EGA-E series cards, because ED-E, EG-E, and EGA-E series cards do not support sampling of AS ang BGP next hop information.
Parameters
Parameter |
Description |
Value |
|---|---|---|
as |
Specifies the AS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
as-tos |
Specifies the AS-ToS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, outbound interface index, and ToS. |
- |
bgp-nexthop-tos |
Specifies the BGP-nexthop-ToS aggregation. It classifies flows based on BGP next hop, source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
destination-prefix |
Specifies the destination-prefix aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, and outbound interface index. |
- |
destination-prefix-tos |
Specifies the destination-prefix-ToS aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, outbound interface index, and ToS. |
- |
index-tos |
Specifies the index-ToS aggregation. It classifies flows based on inbound interface index, outbound interface index, and ToS. |
- |
mpls-label |
Specifies the MPLS label aggregation. It classifies flows based on 10 key values, including the label value of each layer, EXP value matching each label, first label address, and stack bottom symbol of each label. |
- |
prefix |
Specifies the prefix aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, and outbound interface index. |
- |
prefix-tos |
Specifies the prefix-ToS aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, outbound interface index, and ToS. |
- |
protocol-port |
Specifies the protocol-port aggregation. It classifies flows based on protocol number, source port, and destination port. |
- |
protocol-port-tos |
Specifies the protocol-port-ToS aggregation. It classifies flows based on protocol number, source port, destination port, ToS, inbound interface index, and outbound interface index. |
- |
source-prefix |
Specifies the source-prefix aggregation. It classifies flows based on source AS number, source mask length, source prefix, and inbound interface index. |
- |
source-prefix-tos |
Specifies the source-prefix-ToS aggregation. It classifies flows based on source AS number, source mask length, source prefix, ToS, and inbound interface index. |
- |
source-index-tos |
Specifies the inbound-interface-index-ToS aggregation. It classifies flows based on inbound interface index, ToS, and BGP next hop. |
- |
vlan-id |
Specifies the VLAN aggregation. It classifies flows based on VLAN ID and inbound interface index. |
- |
Usage Guidelines
Usage Scenario
NetStream aggregation groups the original flows with the same attributes together. The aggregation flow statistics collection and original flow statistics collection are different. The original flow statistics collection is on the basis of sampled packets, while the aggregation flow statistics collection is on the basis of original flows. Therefore, the aggregation flow statistics collection generates less data.
The aggregation flow statistics collection provides 15 aggregation methods and has the following benefits:
- If the user concerns about only one attribute of network traffic, the aggregation flow statistics collection is a good choice.
- The aggregation flow statistics collection reduces the volume of data sent to the NMS, relieving network loads.
- The aggregation flow statistics collection consumes less resource to process aggregation flows. The NMS obtains flow information by resolving the aggregation flow statistics through the aggregation template.
Prerequisites
Before configuring MPLS-label aggregation, run the netstream mpls-aware ip command to set the sampling mode for MPLS packets to label-and-ip or label-only.
Precautions
When the aggregation mode is set to vlan-id, the switch can aggregate only inbound original flows.
When NetStream aggregation mode is set to as, as-tos, or bgp-nexthop-tos, the exported NetStream packets must contain routing information.
When the exported NetStream packets do not carry routing information and the NetStream aggregation mode is destination-prefix, destination-prefix-tos, prefix, prefix-tos, source-prefix, source-prefix-tos, or source-index-tos, the as, next hop, and BGP next hop fields in the exported NetStream packets have a fixed value of 0.
Follow-up Procedure
Run the enable command in the aggregation view to enable the device to export flow statistics according to the configured aggregation method.
Example
# Configure the NetStream AS aggregation method.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip as [*HUAWEI-netstream-aggregation-as]
# Configure the NetStream destination-prefix aggregation method.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip destination-prefix [*HUAWEI-netstream-aggregation-dstpre]
netstream aggregation timeout ip active
Function
The netstream aggregation timeout ip active command sets the active aging time of IPv4 aggregation flows.
The undo netstream aggregation timeout ip active command restores the default setting.
By default, the active aging time of IPv4 aggregation flows is 5 minutes.
Format
netstream aggregation timeout ip active active-interval
undo netstream aggregation timeout ip active [ active-interval ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
active-interval |
Specifies the active aging time of IPv4 aggregation flows. |
The value is an integer that ranges from 1 to 60, in minutes. The default value is 5. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active time (from flow creation time to the current time) of an aggregation flow exceeds the specified active aging time, the flow is exported to the destination.
To quickly detect the status of an active flow, set the active time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the active time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream aggregation timeout ip inactive
Function
The netstream aggregation timeout ip inactive command sets the inactive aging time of IPv4 aggregation flows.
The undo netstream aggregation timeout ip inactive command restores the default setting.
By default, the inactive aging time of IPv4 aggregation flows is 300 seconds.
Format
netstream aggregation timeout ip inactive inactive-interval
undo netstream aggregation timeout ip inactive [ inactive-interval ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
inactive-interval |
Specifies the inactive aging time of IPv4 aggregation flows. |
The value is an integer that ranges from 5 to 600, in seconds. The default value is 300. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive time (from the last packet receiving time to the current time) of an aggregation flow exceeds the specified inactive aging time, the flow is exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream aggregation ipv6
Function
The netstream aggregation ipv6 command configures the IPv6 aggregation method and displays the IPv6 aggregation view.
The undo netstream aggregation ipv6 command deletes the IPv6 aggregation method.
By default, IPv6 aggregation is not configured.
Format
netstream aggregation ipv6 { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos | vlan-id }
undo netstream aggregation ipv6 { as | as-tos | bgp-nexthop-tos | destination-prefix | destination-prefix-tos | index-tos | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos | vlan-id }
The CE12800E does not support the as, as-tos, and bgp-nexthop-tos parameters when configured with ED-E, EG-E, and EGA-E series cards, because ED-E, EG-E, and EGA-E series cards do not support sampling of AS ang BGP next hop information.
Parameters
| Parameter | Description | Value |
|---|---|---|
as |
Specifies the AS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
as-tos |
Specifies the AS-ToS aggregation. It classifies flows based on source AS number, destination AS number, inbound interface index, outbound interface index, and ToS. |
- |
bgp-nexthop-tos |
Specifies the BGP-nexthop-ToS aggregation. It classifies flows based on BGP next hop, source AS number, destination AS number, inbound interface index, and outbound interface index. |
- |
destination-prefix |
Specifies the destination-prefix aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, and outbound interface index. |
- |
destination-prefix-tos |
Specifies the destination-prefix-ToS aggregation. It classifies flows based on destination AS number, destination mask length, destination prefix, outbound interface index, and ToS. |
- |
index-tos |
Specifies the index-ToS aggregation. It classifies flows based on inbound interface index, outbound interface index, and ToS. |
- |
prefix |
Specifies the prefix aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, and outbound interface index. |
- |
prefix-tos |
Specifies the prefix-ToS aggregation. It classifies flows based on source AS number, destination AS number, source mask length, destination mask length, source prefix, destination prefix, inbound interface index, outbound interface index, and ToS. |
- |
protocol-port |
Specifies the protocol-port aggregation. It classifies flows based on protocol number, source port, and destination port. |
- |
protocol-port-tos |
Specifies the protocol-port-ToS aggregation. It classifies flows based on protocol number, source port, destination port, ToS, inbound interface index, and outbound interface index. |
- |
source-prefix |
Specifies the source-prefix aggregation. It classifies flows based on source AS number, source mask length, source prefix, and inbound interface index. |
- |
source-prefix-tos |
Specifies the source-prefix-ToS aggregation. It classifies flows based on source AS number, source mask length, source prefix, ToS, and inbound interface index. |
- |
vlan-id |
Specifies the VLAN aggregation. It classifies flows based on VLAN ID and inbound interface index. |
- |
Usage Guidelines
Usage Scenario
NetStream aggregation groups the original flows with the same attributes together. The aggregation flow statistics collection and original flow statistics collection are different. The original flow statistics collection is on the basis of sampled packets, while the aggregation flow statistics collection is on the basis of original flows. Therefore, the aggregation flow statistics collection generates less data.
The aggregation flow statistics collection provides 13 aggregation methods and has the following benefits:
- If the user concerns about only one attribute of network traffic, the aggregation flow statistics collection is a good choice.
- The aggregation flow statistics collection reduces the volume of data sent to the NMS, relieving network loads.
- The aggregation flow statistics collection consumes less resource to process aggregation flows. The NMS obtains flow information by resolving the aggregation flow statistics through the aggregation template.
Precautions
When the aggregation mode is set to vlan-id, the switch can aggregate only inbound original flows.
When NetStream aggregation mode is set to as, as-tos, or bgp-nexthop-tos, the exported NetStream packets must contain routing information.
When the exported NetStream packets do not carry routing information and the NetStream aggregation mode is destination-prefix, destination-prefix-tos, prefix, prefix-tos, source-prefix, source-prefix-tos, or source-index-tos, the as, next hop, and BGP next hop fields in the exported NetStream packets have a fixed value of 0.
Follow-up Procedure
Run the enable command in the IPv6 aggregation view to enable the device to export flow statistics according to the configured aggregation method.
netstream aggregation timeout ipv6 active
Function
The netstream aggregation timeout ipv6 active command sets the active aging time of IPv6 aggregation flows.
The undo netstream aggregation timeout ipv6 active command restores the default setting.
By default, the active aging time of IPv6 aggregation flows is 5 minutes.
Format
netstream aggregation timeout ipv6 active active-interval
undo netstream aggregation timeout ipv6 active [ active-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| active-interval | Specifies the active aging time of IPv6 aggregation flows. | The value is an integer that ranges from 1 to 60, in minutes. The default value is 5. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active time (from flow creation time to the current time) of an IPv6 aggregation flow exceeds the specified active aging time, the flow is exported to the destination.
To detect the status of an active flow quickly, set a short active time. This increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set a long active time.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream aggregation timeout ipv6 inactive
Function
The netstream aggregation timeout ipv6 inactive command sets the inactive aging time of IPv6 aggregation flows.
The undo netstream aggregation timeout ipv6 inactive command restores the default setting.
By default, the inactive aging time of IPv6 aggregation flows is 300 seconds.
Format
netstream aggregation timeout ipv6 inactive inactive-interval
undo netstream aggregation timeout ipv6 inactive [ inactive-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| inactive-interval | Specifies the inactive aging time of IPv6 aggregation flows. | The value is an integer that ranges from 5 to 600, in seconds. The default value is 300. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive time (from the last packet receiving time to the current time) of an IPv6 aggregation flow exceeds the specified inactive aging time, the flow is exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream as-mode
Function
The netstream as-mode command sets the AS number format used for NetStream sampling.
The undo netstream as-mode command restores the default setting.
By default, NetStream sampling supports the 16-bit AS number.
The CE12800E does not support this command when configured with ED-E, EG-E, and EGA-E series cards, because the ED-E, EG-E, and EGA-E series cards do not support AS information sampling.
Parameters
| Parameter | Description | Value |
|---|---|---|
16 |
Set the AS number format in the exported packets to 16-bit. |
- |
32 |
Set the AS number format in the exported packets to 32-bit. |
- |
Usage Guidelines
Usage Scenario
After the 16-bit AS number is set, NetStream exports templates and samples data flows using the 16-bit AS number. After the 32-bit AS number is set, NetStream exports templates and samples data flows using the 32-bit AS number.
The specified AS number format must be the same as that used on the network; otherwise, NetStream cannot sample flows between ASs.
Prerequisites
On a network using the 32-bit AS number format, the NMS must be able to identify the 32-bit AS numbers. Otherwise, the NMS cannot identify inter-AS flows sent from devices.
netstream ethernet
Function
The netstream ethernet command enables Layer 2 statistics collection on interfaces.
The undo netstream ethernet command restores the default setting.
By default, Layer 2 statistics collection is disabled on interfaces.
Parameters
| Parameter | Description | Value |
|---|---|---|
inbound |
Enables Layer 2 statistics collection in the inbound direction. |
- |
outbound |
Enables Layer 2 statistics collection in the outbound direction. |
- |
Usage Guidelines
Usage Scenario
To collect Layer 2 statistics in packets on an interface, run this command to enable Layer 2 statistics collection on the interface.
Precautions
After Layer 2 statistics collection is enabled on an interface in the inbound and outbound directions, all packets and packet fragments are analyzed.
- The CE12800E configured with FD-X series cards supports NetStream configuration in the inbound direction of Layer 3 sub-interfaces, do not support NetStream configuration in the outbound direction of Layer 3 sub-interfaces, and do not support NetStream configuration in the Layer 2 sub-interfaces
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support NetStream configuration in the Layer 3 or Layer 2 sub-interface view.
netstream export ethernet host
Function
The netstream export ethernet host command configures the destination address and destination UDP port number for the exported packets carrying Layer 2 NetStream flow statistics.
The undo netstream export ethernet host command deletes the destination address and destination UDP port number for the exported packets carrying Layer 2 NetStream flow statistics.
By default, the destination address and destination UDP port number of exported packets carrying Layer 2 NetStream flow statistics is not configured.
Format
netstream export ethernet host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
undo netstream export ethernet host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
Parameters
| Parameter | Description | Value |
|---|---|---|
ip-address |
Specifies the destination IPv4 address of the exported packets carrying Layer 2 NetStream flow statistics. |
- |
ipv6 ipv6-address |
Specifies the destination IPv6 address of the exported packets carrying Layer 2 NetStream flow statistics. |
- |
port-number |
Specifies the destination UDP port of the exported packets carrying Layer 2 NetStream flow statistics. |
The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name |
Specifies the VPN instance of the exported packets carrying Layer 2 flow statistics. |
The VPN instance has been created on the device. |
dscp dscp-value |
Specifies the DSCP priority of the exported packets carrying Layer 2 flow statistics. |
The value is an integer ranging from 0 to 63. The default value is 0. A larger value indicates a higher priority. |
Usage Guidelines
Usage Scenario
After finishing data collection, the NDE sends the collected data to the NSC. This command specifies the destination address of the collected data, that is, the NSC IP address.
Precautions
You can configure two pairs of destination addresses and destination port numbers to implement NSC backup. To configure a third pair of a destination address and a destination port number, run the undo netstream export ethernet host command to delete an existing pair first. Otherwise, the system displays a message indicating that the maximum number of addresses is exceeded and the configuration fails.
netstream export ethernet index-switch
Function
The netstream export ethernet index-switch command sets the number of digits in the interface index contained in an exported packet carrying Layer 2 NetStream statistics.
The undo netstream export ethernet index-switch command restores the default setting.
By default, an interface index contains 16 digits.
Format
netstream export ethernet index-switch index-switch
undo netstream export ethernet index-switch [ index-switch ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
index-switch |
Specifies the number of digits in an interface index. |
The value is 16 or 32. The default value is 16. |
Usage Guidelines
Usage Scenario
You can run the netstream export ethernet index-switch command to set the number of digits in the interface index to 16 or 32.
You need to set the type of the interface index contained in Layer 2 NetStream statistics according to the type of the interface index that can be parsed by the NMS. For example, if the NMS can parse the 32-digit interface index, set the type of the interface index contained in Layer 2 NetStream statistics to 32-digit interface index.
Prerequisites
The interface index length in exported packets can be set to 32 bits only when the NMS supports 32-bit interface index; otherwise, the NMS cannot identify the Layer 2 NetStream statistics packets.
This command only applies to V9 format.
netstream export ethernet source
Function
The netstream export ethernet source command configures the source address for the exported packets carrying Layer 2 NetStream flow statistics.
The undo netstream export ethernet source command deletes the source address for the exported packets carrying Layer 2 NetStream flow statistics.
By default, the source address of the exported packets carrying Layer 2 NetStream flow statistics is not configured.
Format
netstream export ethernet source { ip-address | ipv6 ipv6-address }
undo netstream export ethernet source [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| ip-address | Specifies the source IPv4 address of the exported packets carrying Layer 2 NetStream flow statistics. | - |
| ipv6 ipv6-address | Specifies the source IPv6 address of the exported packets carrying Layer 2 NetStream flow statistics. | - |
Usage Guidelines
Usage Scenario
If the NMS identifies the data source according to the source IP address in NetStream packets, you need to specify the source IP address for NetStream packets.
Precaution
If the source IP address is not specified, packets are not exported. The source address of the exported packets carrying Layer 2 NetStream flow statistics can be an IPv4 or IPv6 address. There must be a reachable route between the source IP address and destination IP address (NSC address). Two source IP addresses can be specified: one IPv4 address and one IPv6 address.
netstream export ethernet template timeout-rate
Function
The netstream export ethernet template timeout-rate sets the interval at which the template for exporting Layer 2 NetStream flow statistics in V9 format is refreshed.
The undo netstream export ethernet template timeout-rate command restores the default setting.
By default, the template is refreshed every 1 minute.
Format
netstream export ethernet template timeout-rate timeout-interval
undo netstream export ethernet template timeout-rate [ timeout-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
timeout-interval |
Specifies the interval for refreshing the V9 template. |
The value is an integer that ranges from 1 to 3600, in minutes. The default value is 1. |
Usage Guidelines
Usage Scenario
When the export version for Layer 2 NetStream flow statistics is set to V9, the template must be exported to the NDA. This command sets the interval for refreshing the V9 template.
If network traffic is heavy, the template refresh interval should be set to a small value; however, this will generate more traffic on the network. You need to set a proper template refresh interval according to network situation. The default refresh interval is recommended if you do not have special requirement.
Precaution
If the default template update interval (30 minutes) is used in V200R001C00 or an earlier version, the interval is automatically changed to 1 minute after the version is upgraded to V200R002C50 or later.
If the default template update interval (1 minute) is used in V200R002C50 or a later version, the interval is automatically changed to 30 minutes after the version is downgraded to V200R001C00 or an earlier version.
netstream export ethernet version
Function
The netstream export ethernet version command sets the export version for Layer 2 NetStream flow statistics.
The undo netstream export ethernet version command restores the default setting.
By default, the export version for Layer 2 NetStream flow statistics is not set.
Parameters
Parameter |
Description |
Value |
|---|---|---|
9 |
Sets the export version for Layer 2 NetStream flow statistics to V9. |
- |
Usage Guidelines
The NDE exports NetStream flow statistics to the NSC. The version of exported packets must be the same as that configured on the NSC so that the NSC can parse the exported packets.
The export version for Layer 2 NetStream flow statistics can only be V9. If the export version is not specified, Layer 2 statistics collection does not take effect.
netstream export ip host
Function
The netstream export ip host command configures the destination IP address and destination UDP port number for the exported packets carrying IPv4 flow statistics.
The undo netstream export ip host command deletes the configured destination IP address and destination UDP port number for the exported packets carrying IPv4 flow statistics.
By default, no destination IP address or destination UDP port number is configured in the system view or aggregation view for the exported packets carrying IPv4 flow statistics.
Format
netstream export ip host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
undo netstream export ip host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the destination IPv4 address of the exported packets carrying IPv4 flow statistics. |
- |
ipv6 ipv6-address |
Specifies the destination IPv6 address of the exported packets carrying IPv4 flow statistics. |
- |
port-number |
Specifies the destination UDP port number of the exported packets carrying IPv4 flow statistics. |
The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name |
Specifies the VPN instance of the exported packets carrying IPv4 flow statistics. |
The value must be the name of an existing VPN instance on the device. |
dscp dscp-value |
Specifies the DSCP priority of the exported packets carrying IPv4 flow statistics. |
The value is an integer ranging from 0 to 63. The default value is 0. A larger value indicates a higher priority. |
Usage Guidelines
Usage Scenario
After finishing data collection, the NDE sends the collected data to the NSC. This command specifies the destination address of the collected data, that is, the NSC IP address.
Precautions
When you run the netstream export ip host command in the system view, this command configures the destination address for the exported packets carrying IPv4 original flow statistics and IPv4 flexible flow statistics; when you run this command in the aggregation view, this command configures the destination address for the exported packets carrying IPv4 aggregation flows. The exported packets carrying aggregation flow statistics preferentially use the destination address configured in the aggregation view. If the destination address is not configured in the aggregation view, the exported packets carrying aggregation flow statistics use the destination address configured in the system view.
You can configure two pairs of destination addresses and destination port numbers in the system view or aggregation view to implement NSC backup. To configure a third pair of a destination address and a destination port number, run the undo netstream export ip host command to delete an existing pair first. Otherwise, the system displays a message indicating that the maximum number of addresses is exceeded and the configuration fails.
Example
# Set the destination IP address for the exported packets carrying original flow statistics to 10.1.1.1, and UDP port number to 222.
<HUAWEI> system-view [~HUAWEI] netstream export ip host 10.1.1.1 222
# Set the destination IP address for the exported packets carrying aggregation flow statistics to 10.2.2.1, and UDP port number to 255.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip as [*HUAWEI-netstream-aggregation-as] netstream export ip host 10.2.2.1 255
netstream export ip index-switch
Function
The netstream export ip index-switch command sets the number of digits in the interface index contained in an exported packet carrying IPv4 flow statistics.
The undo netstream export ip index-switch command restores the default setting.
By default, the number of digits in interface indexes is 16.
Format
netstream export ip index-switch index-switch
undo netstream export ip index-switch [ index-switch ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
index-switch |
Specifies the number of digits in the index of a specified interface. |
The value is 16 or 32. The default value is 16. |
Usage Guidelines
Usage Scenario
You can run the ip netstream export index-switch command to set the number of digits in the interface index to 16 or 32.
The number of digits in an interface index contained in exported packets must be the same as the number of digits in an interface index that can be parsed by the NMS. For example, if the NMS can parse the 32-digit interface index, set the number of digits in an interface index contained in exported packets to 32.
Precautions
The number of digits in the interface index can be changed to 32 only when the NMS supports 32-digit interface index. If the number of digits in an interface index contained in exported packets is different from the number of digits in an interface index supported by the NMS, the NMS cannot identify NetStream packets sent by the device.
This command is valid for V9. Before changing 16-digit interface indexes to 32-digit interface indexes, ensure that:
- The version of exported packets of original flows is V9.
- The version of exported packets carrying aggregation flow statistics is V9.
When the 32-digit interface index is used, the version of exported packets of original flows cannot be changed from V9 to V5, and the version of exported packets carrying aggregation flow statistics cannot be changed from V9 to V8.
netstream export ip route disable
Function
The netstream export ip route disable command configures the NetStream packets exported by the device not to carry IPv4 routing information.
The undo netstream export ip route disable command restores the default configuration.
By default, NetStream packets exported by the device carry routing information.
Usage Guidelines
Usage Scenario
By default, NetStream packets exported by the device carry routing information. The device collects routing information together with NetStream sampling, and encapsulates routing information into NetStream packets. This will increase the CPU usage of the device. When a network carries heavy traffic or runs many services, the device performance may be degraded.
After the netstream export ip route disable command is executed, the device performance is improved. After NetStream IPv4 is configured on the device, if you do not need the IPv4 routing information, run this command.
Precautions
When NetStream aggregation mode is set to as, as-tos, or bgp-nexthop-tos, the exported NetStream packets must contain routing information.
When the exported NetStream packets do not carry routing information and the NetStream aggregation mode is destination-prefix, destination-prefix-tos, prefix, prefix-tos, source-prefix, source-prefix-tos, or source-index-tos, the as, next hop, and BGP next hop fields in the exported NetStream packets have a fixed value of 0.
netstream export ip source
Function
The netstream export ip source command configures the source address for the exported packets carrying IPv4 flow statistics.
The undo netstream export ip source command deletes the configured source address for the exported packets carrying IPv4 flow statistics.
By default, the source IP address of the exported packets carrying IPv4 flow statistics is not configured.
Format
netstream export ip source { ip-address | ipv6 ipv6-address }
undo netstream export ip source [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the source IPv4 address of the exported packets carrying IPv4 flow statistics. |
- |
ipv6 ipv6-address |
Specifies the source IPv6 address of the exported packets carrying IPv4 flow statistics. |
- |
Usage Guidelines
Usage Scenario
If the NMS identifies the data source according to the source IP address in NetStream packets, you need to specify the source IP address for NetStream packets.
Precautions
If the source IP address is also configured in the system view, NetStream prefers the source IP address configured in the aggregation view. If no source address is specified in an aggregation method, the source address configured in the system view is used.
If the source IP address is not specified, packets are not exported. The source address of the exported packets carrying IPv6 aggregation flow statistics can be an IPv4 or IPv6 address. There must be a reachable route between the source IP address and destination IP address (NSC address). Two source IP addresses can be specified: one IPv4 address and one IPv6 address.
Example
# In the system view, set the source address for the exported packets carrying IPv4 flow statistics to 10.1.1.1.
<HUAWEI> system-view [~HUAWEI] netstream export ip source 10.1.1.1
# In the aggregation view, set the source address for the exported packets carrying IPv4 flow statistics to 10.2.2.2.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip as [*HUAWEI-netstream-aggregation-as] netstream export ip source 10.2.2.2
netstream export ip template timeout-rate
Function
The netstream export ip template timeout-rate command sets the interval at which the template for exporting IPv4 original flow statistics and IPv4 flexible flow statistics in V9 format is refreshed.
The undo netstream export ip template timeout-rate command restores the default setting.
By default, the template is refreshed every 1 minute.
Format
netstream export ip template timeout-rate timeout-interval
undo netstream export ip template timeout-rate [ timeout-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
timeout-interval |
Specifies the interval for refreshing the V9 template. |
The value is an integer that ranges from 1 to 3600, in minutes. The default value is 1. |
Usage Guidelines
Usage Scenario
When the export version for IPv4 original flow statistics and IPv4 flexible flow statistics is set to V9, the template must be exported to the NDA. This command sets the interval for refreshing the V9 template.
If network traffic is heavy, the template refresh interval should be set to a small value; however, this will generate more traffic on the network. You need to set a proper template refresh interval according to network situation. The default refresh interval is recommended if you do not have special requirement.
Precaution
If the default template update interval (30 minutes) is used in V200R001C00 or an earlier version, the interval is automatically changed to 1 minute after the version is upgraded to V200R002C50 or later.
If the default template update interval (1 minute) is used in V200R002C50 or a later version, the interval is automatically changed to 30 minutes after the version is downgraded to V200R001C00 or an earlier version.
netstream export ip version
Function
The netstream export ip version command configures the version number of the exported packets carrying IPv4 flow statistics.
The undo netstream export ip version command restores the default setting.
By default, the version number of the exported packets carrying IPv4 original flow statistics is 5 and no AS option is used. No version number is configured for the exported packets carrying IPv4 flexible flow statistics.
Format
netstream export ip version { 5 [ origin-as | peer-as ] | 9 [ origin-as | peer-as ] [ bgp-nexthop ] }
undo netstream export ip version [ 5 [ origin-as | peer-as ] | 9 [ origin-as | peer-as ] [ bgp-nexthop ] ]
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support sample AS and BGP next hop information. The configuration of NetStream flow export does not support the origin-as, peer-as, and bgp-nexthop parameters.
Parameters
Parameter |
Description |
Value |
|---|---|---|
5 |
Sets the version of exported packets carrying IPv4 flow statistics to V5. |
The default is 5. |
9 |
Sets the version of exported packets carrying IPv4 flow statistics to V9. |
- |
origin-as |
Specifies the AS number recorded in the statistics as the original AS number. |
- |
peer-as |
Specifies the AS number recorded in the statistics as the peer AS number. |
- |
bgp-nexthop |
Configures the statistics to carry BGP next hop information. Currently, only V9 supports the exported packets carrying BGP next hop information. |
- |
Usage Guidelines
Usage Scenario
The NDE exports NetStream flow statistics to the NSC. The version of exported packets must be the same as that configured on the NSC so that the NSC can parse the exported packets.
The format of exported packets in V5 is fixed and is not easy to expand. The format of exported packets in V9 is defined in templates and is easy to combine or expand. The statistics are exported more flexibly.
V9 is supported by most NSCs for its advantages. It is recommended that you set the version of exported packets carrying aggregation flow statistics to V9.
Exported packets carrying IPv4 flexible flow statistics
Exported packets carrying BGP next-hop information
Exported packets carrying 32-bit interface indexes
Precautions
When the exported packets carry 32-bit interface indexes, the export version cannot be changed from V9 to V5.
The AS option is used according to the actual situation of the AS configured on each device. The AS option affects only the packet statistics result, but does not affect the flows. The AS option is encapsulated in the AS option field carried in the NetStream packets sent to the NMS. The exported packets of V5 do not support BGP next hop information.
netstream export ipv6 host
Function
The netstream export ipv6 host command configures the destination IP address and destination UDP port number for the exported packets carrying IPv6 flow statistics.
The undo netstream export ipv6 host command deletes the configured destination IP address and destination UDP port number for the exported packets carrying IPv6 flow statistics.
By default, no destination IP address or destination UDP port number is configured in the system view or aggregation view for the exported packets carrying IPv6 flow statistics.
Format
netstream export ipv6 host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
undo netstream export ipv6 host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the destination IPv4 address of the exported packets carrying IPv6 flow statistics. |
- |
ipv6 ipv6-address |
Specifies the destination IPv6 address of the exported packets carrying IPv6 flow statistics. |
- |
port-number |
Specifies the destination UDP port number of the exported packets carrying IPv6 flow statistics. |
The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name |
Specifies the VPN instance of the exported packets carrying IPv6 flow statistics. |
The value must be the name of an existing VPN instance on the device. |
dscp dscp-value |
Specifies the DSCP priority of the exported packets carrying IPv6 flow statistics. |
The value is an integer ranging from 0 to 63. The default value is 0. A larger value indicates a higher priority. |
Usage Guidelines
Usage Scenario
After finishing data collection, the NDE sends the collected data to the NSC. This command specifies the destination address of the collected data, that is, the NSC IP address.
Precautions
When you run the netstream export ip host command in the system view, this command configures the destination address for the exported packets carrying IPv6 original flow statistics and IPv6 flexible flow statistics; when you run this command in the aggregation view, this command configures the destination address for the exported packets carrying IPv6 aggregation flows. The exported packets carrying aggregation flow statistics preferentially use the destination address configured in the aggregation view. If the destination address is not configured in the aggregation view, the exported packets carrying aggregation flow statistics use the destination address configured in the system view.
You can configure two pairs of destination addresses and destination port numbers in the system view or aggregation view to implement NSC backup. To configure a third pair of a destination address and a destination port number, run the undo netstream export ipv6 host command to delete an existing pair first. Otherwise, the system displays a message indicating that the maximum number of addresses is exceeded and the configuration fails.
Example
# Set the destination IP address for the exported packets carrying IPv6 original flows to 10.1.1.1, and UDP port number to 222.
<HUAWEI> system-view [~HUAWEI] netstream export ipv6 host 10.1.1.1 222
# Set the destination IP address for the exported packets carrying IPv6 aggregation flow statistics to 10.2.2.1, and UDP port number to 255.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ipv6 as [*HUAWEI-netstream-aggregation-ipv6-as] netstream export ipv6 host 10.2.2.1 255
netstream export ipv6 index-switch
Function
The netstream export ipv6 index-switch command sets the number of digits in the interface index contained in an exported packet carrying IPv6 flow statistics.
The undo netstream export ipv6 index-switch command restores the default setting.
By default, an interface index contains 16 digits.
Format
netstream export ipv6 index-switch index-switch
undo netstream export ipv6 index-switch [ index-switch ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
index-switch |
Specifies the digit of the interface index. |
The value is an integer that can be 16 or 32. The default is 16. |
Usage Guidelines
Usage Scenario
You can run the ipv6 netstream export index-switch command to set the number of digits in the interface index to 16 or 32.
Set the type of the interface index contained in exported packets the same as the type of the interface index that can be parsed by the NMS. For example, if the NMS can parse the 32-digit interface index, set the type of the interface index contained in exported packets to 32-digit interface index.
Prerequisites
The interface index length in exported packets can be set to 32 bits only when the NMS supports 32-bit interface index; otherwise, the NMS cannot identify the NetStream packets.
netstream export ipv6 route disable
Function
The netstream export ipv6 route disable command configures the NetStream packets exported by the device not to carry IPv6 routing information.
The undo netstream export ipv6 route disable command restores the default configuration.
By default, NetStream packets exported by the device carry routing information.
Usage Guidelines
Usage Scenario
By default, NetStream packets exported by the device carry routing information. The device collects routing information together with NetStream sampling, and encapsulates routing information into NetStream packets. This will increase the CPU usage of the device. When a network carries heavy traffic or runs many services, the device performance may be degraded.
After the netstream export ipv6 route disable command is executed, the device performance is improved. After NetStream IPv6 is configured on the device, if you do not need the IPv6 routing information, run this command.
Precautions
When NetStream aggregation mode is set to as, as-tos, or bgp-nexthop-tos, the exported NetStream packets must contain routing information.
When the exported NetStream packets do not carry routing information and the NetStream aggregation mode is destination-prefix, destination-prefix-tos, prefix, prefix-tos, source-prefix, source-prefix-tos, or source-index-tos, the as, next hop, and BGP next hop fields in the exported NetStream packets have a fixed value of 0.
netstream export ipv6 source
Function
The netstream export ipv6 source command configures the source address for the exported packets carrying IPv6 flow statistics.
The undo netstream export ipv6 source command deletes the configured source address for the exported packets carrying IPv6 flow statistics.
By default, the source IP address of the exported packets carrying IPv6 flow statistics is not configured.
Format
netstream export ipv6 source { ip-address | ipv6 ipv6-address }
undo netstream export ipv6 source [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the source IPv4 address of the exported packets carrying IPv6 flow statistics. |
- |
ipv6 ipv6-address |
Specifies the source IPv6 address of the exported packets carrying IPv6 flow statistics. |
- |
Usage Guidelines
Usage Scenario
If the NMS identifies the data source according to the source IP address in NetStream packets, you need to specify the source IP address for NetStream packets.
Precaution
If the source IP address is also configured in the system view, NetStream prefers the source IP address configured in the IPv6 aggregation view. If no source address is specified in an aggregation method, the source address configured in the system view is used.
If the source IP address is not specified, packets are not exported. The source address of the exported packets carrying IPv6 aggregation flow statistics can be an IPv4 or IPv6 address. There must be a reachable route between the source IP address and destination IP address (NSC address). Two source IP addresses can be specified: one IPv4 address and one IPv6 address.
Example
# In the system view, set the source address for the exported packets carrying IPv6 flow statistics to 10.1.1.1.
<HUAWEI> system-view [~HUAWEI] netstream export ipv6 source 10.1.1.1
# In the IPv6 aggregation view, set the source address for the exported packets carrying IPv6 flow statistics to 10.2.2.2.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ipv6 destination-prefix [*HUAWEI-netstream-aggregation-ipv6-dstpre] netstream export ipv6 source 10.2.2.2
netstream export ipv6 template timeout-rate
Function
The netstream export ipv6 template timeout-rate command sets the interval at which the template for exporting IPv6 original flow statistics and IPv6 flexible flow statistics in V9 format is refreshed.
The undo netstream export ipv6 template timeout-rate command restores the default setting.
By default, the template is refreshed every 1 minute.
Format
netstream export ipv6 template timeout-rate timeout-interval
undo netstream export ipv6 template timeout-rate [ timeout-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
timeout-interval |
Specifies the interval for refreshing the V9 template. |
The value is an integer that ranges from 1 to 3600, in minutes. The default value is 1. |
Usage Guidelines
Usage Scenario
When the export version for IPv6 original flow statistics and IPv6 flexible flow statistics is set to V9, the template must be exported to the NDA. This command sets the interval for refreshing the V9 template.
If network traffic is heavy, the template refresh interval should be set to a small value; however, this will generate more traffic on the network. You need to set a proper template refresh interval according to network situation. The default refresh interval is recommended if you do not have special requirement.
Precaution
If the default template update interval (30 minutes) is used in V200R001C00 or an earlier version, the interval is automatically changed to 1 minute after the version is upgraded to V200R002C50 or later.
If the default template update interval (1 minute) is used in V200R002C50 or a later version, the interval is automatically changed to 30 minutes after the version is downgraded to V200R001C00 or an earlier version.
netstream export ipv6 version
Function
The netstream export ipv6 version command configures the version number of the exported packets carrying IPv6 flow statistics.
The undo netstream export ipv6 version command restores the default setting.
By default, the version number of the exported packets carrying IPv6 flow statistics is not specified.
Format
netstream export ipv6 version 9 [ origin-as | peer-as ] [ bgp-nexthop ]
undo netstream export ipv6 version [ 9 [ origin-as | peer-as ] [ bgp-nexthop ] ]
The CE12800E configured with ED-E, EG-E, and EGA-E series cards does not support sample AS and BGP next hop information. The configuration of NetStream flow export does not support the origin-as, peer-as, and bgp-nexthop parameters.
Parameters
Parameter |
Description |
Value |
|---|---|---|
9 |
Sets the version of exported packets to V9. |
- |
origin-as |
Specifies the AS number recorded in the statistics as the original AS number. |
- |
peer-as |
Specifies the AS number recorded in the statistics as the peer AS number. |
- |
bgp-nexthop |
Configures the exported packets to carry BGP next hop information. |
- |
Usage Guidelines
Usage Scenario
The NDE exports NetStream flow statistics to the NSC. The version of exported packets must be the same as that configured on the NSC so that the NSC can parse the exported packets.
Precautions
The AS option is used according to the actual situation of the AS configured on each device. The AS option affects only the packet statistics result, but does not affect the flows. The AS option is encapsulated in the AS option field carried in the NetStream packets sent to the NMS.
netstream export packet-len ethernet-crc
Function
The netstream export packet-len ethernet-crc command configures the IN_BYTES field value in NetStream packets to include the Ethernet header and CRC lengths.
The undo netstream export packet-len ethernet-crc command restores the default setting.
By default, the IN_BYTES field value in NetStream packets is the len field value in the IP packet header.
Usage Guidelines
By default, the IN_BYTES field value in NetStream packets is the len field value in the IP packet header. Some servers do not count the Ethernet header and CRC lengths when parsing NetStream packets. As a result, the traffic statistics are incorrect. To resolve this problem, run the netstream export packet-len ethernet-crc command to configure the IN_BYTES field value in NetStream packets to include the Ethernet header and CRC lengths.
netstream export vxlan inner-ip host
Function
The netstream export vxlan inner-ip host command configures the destination IP address and destination UDP port number for the exported packets carrying VXLAN flexible flow statistics.
The undo netstream export vxlan inner-ip host command deletes the configured destination IP address and destination UDP port number for the exported packets carrying VXLAN flexible flow statistics.
By default, no destination IP address or destination UDP port number is configured for the exported packets carrying VXLAN flexible flow statistics.
Format
netstream export vxlan inner-ip host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
undo netstream export vxlan inner-ip host { ip-address | ipv6 ipv6-address } port-number [ vpn-instance vpn-instance-name ] [ dscp dscp-value ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the destination IPv4 address of the exported packets carrying VXLAN flexible flow statistics. |
- |
ipv6 ipv6-address |
Specifies the destination IPv6 address of the exported packets carrying VXLAN flexible flow statistics. |
- |
port-number |
Specifies the destination UDP port number of the exported packets carrying VXLAN flexible flow statistics. |
The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name |
Specifies the VPN instance name of the exported packets carrying VXLAN flexible flow statistics. |
The value must be the name of an existing VPN instance on the device. |
dscp dscp-value |
Specifies the DSCP priority of the exported packets carrying VXLAN flexible flow statistics. |
The value is an integer ranging from 0 to 63. The default value is 0. A larger value indicates a higher priority. |
Usage Guidelines
Usage Scenario
After finishing data collection, the NDE sends the collected data to the NSC. This command specifies the destination address of the collected data, that is, the NSC IP address.
Precautions
You can configure two pairs of destination addresses and destination port numbers to implement NSC backup. To configure a third pair of a destination address and a destination port number, run the undo netstream export vxlan inner-ip host command to delete an existing pair first. Otherwise, the system displays a message indicating that the maximum number of addresses is exceeded and the configuration fails.
netstream export vxlan inner-ip index-switch
Function
The netstream export vxlan inner-ip index-switch command sets the number of digits in the interface index contained in an exported packet carrying VXLAN flexible flow statistics.
The undo netstream export vxlan inner-ip index-switch command restores the default setting.
By default, an interface index contains 16 digits.
Format
netstream export vxlan inner-ip index-switch index-switch
undo netstream export vxlan inner-ip index-switch [ index-switch ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
index-switch |
Specifies the number of digits in an interface index. |
The value is 16 or 32. The default value is 16. |
Usage Guidelines
Usage Scenario
You can run the netstream export vxlan inner-ip index-switch command to set the number of digits in an interface index to 16 or 32.
The number of digits in the interface index is set according to the type of the interface index that can be parsed by the NMS. For example, if the NMS can parse 32-bit interface indexes, set the format of the interface indexes contained in exported NetStream packets to 32-bit.
Precautions
The interface index length in exported packets can be set to 32 bits only when the NMS supports 32-bit interface index; otherwise, the NMS cannot identify the NetStream packets.
This command takes effect for only V9 exported packets.
netstream export vxlan inner-ip source
Function
The netstream export vxlan inner-ip source command configures the source IP address for the exported packets carrying VXLAN flexible flow statistics.
The undo netstream export vxlan inner-ip source command deletes the source IP address of the exported packets carrying VXLAN flexible flow statistics.
By default, the source IP address of the exported packets carrying VXLAN flexible flow statistics is not configured.
Format
netstream export vxlan inner-ip source { ip-address | ipv6 ipv6-address }
undo netstream export vxlan inner-ip source [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-address |
Specifies the source IPv4 address of the exported packets carrying VXLAN flexible flow statistics. |
- |
ipv6 ipv6-address |
Specifies the source IPv6 address of the exported packets carrying VXLAN flexible flow statistics. |
- |
Usage Guidelines
Usage Scenario
If the NMS needs to identify the data source according to the source IP address in NetStream packets, specify the source IP address for NetStream packets.
Precautions
If the source IP address is not specified, packets are not exported. The source address of the exported packets carrying VXLAN flexible flow statistics can be an IPv4 or IPv6 address. There must be a reachable route between the source IP address and destination IP address (NSC address). Two source IP addresses can be specified: one IPv4 address and one IPv6 address. The statistics collections based on the two addresses are separated.
netstream export vxlan inner-ip template timeout-rate
Function
The netstream export vxlan inner-ip template timeout-rate command sets the interval at which the template for exporting VXLAN flexible flow statistics in V9 format is refreshed.
The undo netstream export vxlan inner-ip template timeout-rate command restores the default setting.
By default, the template is refreshed every 1 minute.
Format
netstream export vxlan inner-ip template timeout-rate timeout-interval
undo netstream export vxlan inner-ip template timeout-rate [ timeout-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
timeout-interval |
Specifies the interval for refreshing the V9 template. |
The value is an integer that ranges from 1 to 3600, in minutes. The default value is 1. |
Usage Guidelines
Usage Scenario
When the export version for VXLAN flexible flow statistics is set to V9, the template must be exported to the NDA. This command sets the interval for refreshing the V9 template.
If network traffic is heavy, the template refresh interval should be set to a small value; however, this will generate more traffic on the network. You need to set a proper template refresh interval according to network situation. The default setting is recommended if you do not have special requirement.
Precaution
If the default template update interval (30 minutes) is used in V200R001C00 or an earlier version, the interval is automatically changed to 1 minute after the version is upgraded to V200R002C50 or later.
If the default template update interval (1 minute) is used in V200R002C50 or a later version, the interval is automatically changed to 30 minutes after the version is downgraded to V200R001C00 or an earlier version.
netstream export vxlan inner-ip version
Function
The netstream export vxlan inner-ip version command sets the version for the exported packets carrying VXLAN flexible flow statistics.
The undo netstream export vxlan inner-ip version command restores the default setting.
By default, the version for exported packets carrying VXLAN flexible flow statistics is not set.
Parameters
Parameter |
Description |
Value |
|---|---|---|
| 9 | Indicates that the version of the exported packets carrying VXLAN flexible flow statistics is 9. |
- |
Usage Guidelines
Usage Scenario
The aged NetStream flows are exported to the NSC. The version of exported packets must be the same as that configured on the NSC so that the NSC can parse the exported packets.
The export version for VXLAN flexible flow statistics can only be V9. If the export version is not specified, VXLAN flexible flow statistics collection does not take effect.
netstream gre-aware ip
Function
The netstream gre-aware ip command configures the device to create NetStream flow tables based on the inner IP header information of GRE packets.
The undo netstream gre-aware ip command restores the default configuration.
By default, the device does not create NetStream flow tables based on the inner IP header information of GRE packets.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Format
netstream gre-aware { ip-only | key-and-ip } ip
undo netstream gre-aware { ip-only | key-and-ip } ip
Parameters
Parameter |
Description |
Value |
|---|---|---|
ip-only |
Indicates that flow tables are created based on the inner packet information of GRE packets. |
- |
key-and-ip |
Indicates that flow tables are created based on the inner packet information of GRE packets and the exported packets carry the Key field of GRE packets. |
- |
Views
GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view
Usage Guidelines
Usage Scenario
To know the usage of resources on a GRE network, you can configure the device to create NetStream flow tables based on the inner packet information of GRE packets and configure the exported packets to carry the Key field of GRE packets.
Prerequisites
- NetStream in enhanced mode has been enabled using the assign forward enp netstream enable command.
Precautions
This command cannot be configured on an Eth-Trunk member interface.
netstream inbound ip filter
Function
The netstream inbound ip filter command filters IPv4 packets based on a specified ACL.
The undo netstream inbound ip filter command restores the default configuration.
By default, IPv4 packets are not filtered based on an ACL.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Parameters
Parameter |
Description |
Value |
|---|---|---|
acl acl-number |
Specifies the number of an advanced ACL. |
The value is an integer in the range from 3000 to 3999. Advanced ACLs can be applied only to traffic classifiers that define Layer 3 information of packets. |
Views
GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view
Usage Guidelines
Usage Scenario
To collect statistics on and analyze specific IPv4 packets, you can run the netstream inbound ip filter command to filter IPv4 packets based on a specified ACL. Only the packets matching the ACL are sampled.
Prerequisites
An ACL has been created using the acl command in the system view.
NetStream in enhanced mode has been enabled using the assign forward enp netstream enable command.
Precautions
- This command takes effect only for incoming traffic.
- This command can filter packets based on the source IP address, destination IP address, protocol type, source Layer 4 port number, destination Layer 4 port number, and TCP flag. If a packet matches a field that is not supported by this command, the packet is not sampled. If a packet matches the deny rule, the traffic is not discarded or sampled.
- This command cannot be configured on an Eth-Trunk member interface.
netstream inbound ipv6 filter
Function
The netstream inbound ipv6 filter command filters IPv6 packets based on a specified ACL.
The undo netstream inbound ipv6 filter command restores the default configuration.
By default, IPv6 packets are not filtered based on an ACL.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Format
netstream inbound ipv6 filter acl acl-number
undo netstream inbound ipv6 filter acl acl-number
Parameters
Parameter |
Description |
Value |
|---|---|---|
acl acl-number |
Specifies the number of an advanced ACL. |
The value is an integer in the range from 3000 to 3999. Advanced ACLs can be applied only to traffic classifiers that define Layer 3 information of packets. |
Views
GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view
Usage Guidelines
Usage Scenario
To collect statistics on and analyze specific IPv6 packets, you can run the netstream inbound ipv6 filter command to filter IPv6 packets based on a specified ACL. Only the packets matching the ACL are sampled.
Prerequisites
An ACL has been created using the acl ipv6 command.
NetStream in enhanced mode has been enabled using the assign forward enp netstream enable command.
Precautions
- This command takes effect only for incoming traffic.
- This command can filter packets based on the source IPv6 address, destination IPv6 address, protocol type, source Layer 4 port number, destination Layer 4 port number, and TCP flag. If a packet matches a field that is not supported by this command, the packet is not sampled. If a packet matches the deny rule, the traffic is not discarded or sampled.
- This command cannot be configured on an Eth-Trunk member interface.
netstream inbound ip filter gre
Function
The netstream inbound ip filter gre command filters IPv4 GRE packets based on a specified ACL.
The undo netstream inbound ip filter gre command restores the default configuration.
By default, IPv4 GRE packets are not filtered based on an ACL.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Format
netstream inbound ip filter gre transit acl acl-number
undo netstream inbound ip filter gre transit acl acl-number
Parameters
Parameter |
Description |
Value |
|---|---|---|
transit |
Matches packets received by intermediate nodes in a tunnel. |
- |
acl acl-number |
Specifies the number of an advanced ACL. |
The value is an integer in the range from 3000 to 3999. Advanced ACLs can be applied only to traffic classifiers that define Layer 3 information of packets. |
Views
GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view
Usage Guidelines
Usage Scenario
To collect statistics on and analyze specific IPv4 GRE packets, you can run the netstream inbound ip filter gre command to filter IPv4 GRE packets based on a specified ACL. Only the packets matching the ACL are sampled.
Prerequisites
An ACL has been created using the acl command in the system view.
NetStream in enhanced mode has been enabled using the assign forward enp netstream enable command.
Precautions
- This command takes effect only for incoming traffic.
- This command can filter packets based on the source IP address, destination IP address, protocol type, source Layer 4 port number, destination Layer 4 port number, and TCP flag in the inner header of GRE packets. If a packet matches a field that is not supported by this command, the packet is not sampled. If a packet matches the deny rule, the traffic is not discarded or sampled.
- This command cannot be configured on an Eth-Trunk member interface.
netstream inbound ip filter vxlan
Function
The netstream inbound ip filter vxlan command filters IPv4 VXLAN packets based on a specified ACL.
The undo netstream inbound ip filter vxlan command restores the default configuration.
By default, IPv4 VXLAN packets are not filtered based on an ACL.
Only the CE12800 configured with FD1, FG, FG1, FD-M, FDA-M, SD, FD and FDA series cards supports this command.
This command is available in V200R019C10SPC900 and later versions.
Format
netstream inbound ip filter vxlan { vni vni-value } transit tag-format none acl acl-number
undo netstream inbound ip filter vxlan { vni vni-value } transit tag-format none acl acl-number
Parameters
Parameter |
Description |
Value |
|---|---|---|
vni vni-value |
Specifies the VNI field in VXLAN packets. |
The value is an integer in the range 1 to 16000000. |
transit |
Matches packets received by intermediate nodes in a tunnel. |
- |
tag-format none |
Matches packets without any inner VLAN tag. |
- |
acl acl-number |
Specifies the number of an advanced ACL. |
The value is an integer in the range from 3000 to 3999. Advanced ACLs can be applied only to traffic classifiers that define Layer 3 information of packets. |
Views
GE interface view, 10GE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view
Usage Guidelines
Usage Scenario
To collect statistics on and analyze specific IPv4 VXLAN packets, you can run the netstream inbound ip filter vxlan command to filter IPv4 VXLAN packets based on a specified ACL. Only the packets matching the ACL are sampled.
Prerequisites
An ACL has been created using the acl command in the system view.
NetStream in enhanced mode has been enabled using the assign forward enp netstream enable command.
Precautions
- This command takes effect only for incoming traffic.
- This command can filter packets based on the VXLAN VNI header, as well as the source IP address, destination IP address, protocol type, source Layer 4 port number, destination Layer 4 port number, and TCP flag in the inner header of VXLAN packets. If a packet matches a field that is not supported by this command, the packet is not sampled. If a packet matches the deny rule, the traffic is not discarded or sampled.
- This command cannot be configured on an Eth-Trunk member interface.
netstream ip
Function
The netstream ip command enables IPv4 flow statistics collection on the inbound and outbound interfaces.
The undo netstream ip command restores the default setting.
By default, statistics collection for IPv4 flows is disabled on the inbound and outbound interfaces.
Parameters
Parameter |
Description |
Value |
|---|---|---|
inbound |
Enables IPv4 flow statistics collection on the inbound interface. |
- |
outbound |
Enables IPv4 flow statistics collection on the outbound interface. |
- |
Usage Guidelines
Usage Scenario
To export IPv4 flow statistics, you must run the netstream ip command to enable IPv4 flow statistics collection on the interface.
Precautions
You can run the netstream ip command and the netstream ipv6 command on the same interface to collect statistics about IPv4 flows and IPv6 flows respectively. There is no interference between the two commands.
- The CE12800E configured with FD-X series cards supports NetStream configuration in the inbound direction of Layer 3 sub-interfaces, do not support NetStream configuration in the outbound direction of Layer 3 sub-interfaces, and do not support NetStream configuration in the Layer 2 sub-interfaces
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support NetStream configuration in the Layer 3 or Layer 2 sub-interface view.
netstream ipv6
Function
The netstream ipv6 command enables IPv6 flow statistics collection on the inbound and outbound interfaces.
The undo netstream ipv6 command restores the default setting.
By default, statistics collection for IPv6 flows is disabled on the inbound and outbound interfaces.
Parameters
Parameter |
Description |
Value |
|---|---|---|
inbound |
Enables IPv6 flow statistics collection on the inbound interface. |
- |
outbound |
Enables IPv6 flow statistics collection on the outbound interface. |
- |
Usage Guidelines
Usage Scenario
To export IPv6 flow statistics, you must run the netstream ipv6 command to enable IPv6 flow statistics collection on the interface.
Precautions
You can run the netstream ipv6 command and the netstream ip command on the same interface to collect statistics about IPv4 flows and IPv6 flows respectively. There is no interference between the two commands.
- The CE12800E configured with FD-X series cards supports NetStream configuration in the inbound direction of Layer 3 sub-interfaces, do not support NetStream configuration in the outbound direction of Layer 3 sub-interfaces, and do not support NetStream configuration in the Layer 2 sub-interfaces
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support NetStream configuration in the Layer 3 or Layer 2 sub-interface view.
netstream record ip (interface view)
Function
The netstream record ip command applies the IPv4 flexible flow statistics template to an interface.
The undo netstream record ip command deletes a specified IPv4 flexible flow statistics template on an interface.
By default, no IPv4 flexible flow statistics template is applied to an interface.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of an IPv4 flexible flow statistics template. |
The record-name must already exist. |
Usage Guidelines
Usage Scenario
After an IPv4 flexible flow statistics template is configured, run the netstream record ip command to apply the template to an interface.
The interface then aggregates flows based on the configured aggregation keywords, collects IPv4 flow statistics, and exports aged flows to the NSC.
Prerequisites
Before an IPv4 flexible flow statistics template is applied to an interface, the template must contain at least one aggregation keyword; otherwise, the template cannot be applied to an interface. The keyword is configured using the match ip command.
Precautions
Each interface can be configured with only one IPv4 flexible flow statistics template. Before modifying the IPv4 flexible flow statistics template in the same interface view, run the undo netstream record ip command to delete the existing configuration.
If the IPv4 flexible flow statistics template has been applied to an interface, the template configuration cannot be modified or deleted.
- The CE12800E configured with FD-X series cards supports the application of the NetStream flexible flow statistics template in the Layer 3 sub-interface view, and does not support the application of the NetStream flexible flow statistics template in the Layer 2 sub-interface view.
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support the application of the NetStream flexible flow statistics template in the Layer 3 or Layer 2 sub-interface view.
Example
# Configure the flexible flow statistics template abc1. Apply such configurations to interface.
<HUAWEI> system-view [~HUAWEI] netstream record abc1 ip [*HUAWEI-netstream-record-ipv4-abc1] match ip destination-address [*HUAWEI-netstream-record-ipv4-abc1] collect counter bytes [*HUAWEI-netstream-record-ipv4-abc1] quit [*HUAWEI] commit [~HUAWEI] interface 10ge 1/0/1 [~HUAWEI-10GE1/0/1] netstream record abc1 ip
netstream record ip (system view)
Function
The netstream record ip command creates an IPv4 flexible flow statistics template or displays the view of an existing IPv4 flexible statistics template.
The undo netstream record ip command deletes a specified IPv4 flexible flow statistics template.
By default, no IPv4 flexible flow statistics template exists.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of the IPv4 flexible flow statistics template. |
The value is a string of 1 to 32 case-sensitive characters without spaces. When quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
Usage Scenario
You need to create the IPv4 flexible flow statistics template before exporting IPv4 flexible flow statistics.
Precautions
A maximum of 16 flexible flow statistics templates can be configured on one device. To configure a third flexible flow statistics template, run the undo ip netstream record command to delete an existing one first.
The flexible flow statistics template that has been applied to an interface cannot be modified or deleted. To delete this flexible flow statistics template, run the undo netstream record ip command on the interface and then modify or delete the template.
An IPv4 flexible flow statistics template and an IPv6 flexible flow statistics template can be created at the same time, and use the same name.
netstream record ipv6 (interface view)
Function
The netstream record ipv6 command applies an IPv6 flexible flow statistics template to an interface.
The undo netstream record ipv6 command deletes an IPv6 flexible flow statistics template from an interface.
By default, no IPv6 flexible flow statistics template is applied to an interface.
Parameters
| Parameter | Description | Value |
|---|---|---|
record-name |
Specifies the name of an IPv6 flexible flow statistics template. |
The record-name must already exist. |
Usage Guidelines
Usage Scenario
After an IPv6 flexible flow statistics template is configured, run the netstream record ipv6 command to apply the template to an interface.
The interface then aggregates flows based on the configured aggregation keywords, collects flow statistics, and exports aged flows to the NSC.
Prerequisites
Before an IPv6 flexible flow statistics template is applied to an interface, the template must contain at least one aggregation keyword; otherwise, the template cannot be applied to an interface. The keyword is configured using the match ipv6 command.
Precaution
Each interface can be configured with only one IPv6 flexible flow statistics template. Before modifying the flexible flow statistics template in the same interface view, run the undo netstream record ipv6 command to delete the existing configuration.
If an IPv6 flexible flow statistics template has been applied to the interface, the template configuration cannot be modified or deleted.
- The CE12800E configured with FD-X series cards supports the application of the NetStream flexible flow statistics template in the Layer 3 sub-interface view, and does not support the application of the NetStream flexible flow statistics template in the Layer 2 sub-interface view.
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support the application of the NetStream flexible flow statistics template in the Layer 3 or Layer 2 sub-interface view.
Example
# Configure the flexible flow statistics template abc1. Apply such configurations to interface.
<HUAWEI> system-view [~HUAWEI] netstream record abc1 ipv6 [*HUAWEI-netstream-record-ipv6-abc1] match ipv6 destination-address [*HUAWEI-netstream-record-ipv6-abc1] collect counter bytes [*HUAWEI-netstream-record-ipv6-abc1] quit [*HUAWEI] commit [~HUAWEI] interface 10ge 1/0/1 [~HUAWEI-10GE1/0/1] netstream record abc1 ipv6
netstream record ipv6 (system view)
Function
The netstream record ipv6 command creates an IPv6 flexible flow statistics template or displays the view of an existing IPv6 flexible flow statistics template.
The undo netstream record ipv6 command deletes a specified IPv6 flexible flow statistics template.
By default, no IPv6 flexible flow statistics template exists.
Parameters
| Parameter | Description | Value |
|---|---|---|
| record-name | Specifies the name of the IPv6 flexible flow statistics template. | The value is a string of 1 to 32 case-sensitive characters without spaces. When quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
Usage Scenario
You need to create an IPv6 flexible flow statistics template before exporting IPv6 flexible flow statistics.
Precaution
A maximum of 16 flexible flow statistics templates can be configured on a device. To configure a 17th flexible flow statistics template, run the undo ipv6 netstream record command to delete an existing one first.
The flexible flow statistics template that has been applied to an interface cannot be modified or deleted. To delete such a template, run the undo netstream record ipv6 command on the interface first.
An IPv4 flexible flow statistics template and an IPv6 flexible flow statistics template can be created at the same time, and use the same name.
netstream record vxlan inner-ip (interface view)
Function
The netstream record vxlan inner-ip command applies a VXLAN flexible flow statistics template to an interface.
The undo netstream record vxlan inner-ip command deletes a VXLAN flexible flow statistics template from an interface.
By default, no VXLAN flexible flow statistics template is applied to an interface.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of a VXLAN flexible flow statistics template. |
The record-name must already exist. |
Usage Guidelines
Usage Scenario
After a VXLAN flexible flow statistics template is configured, run the netstream record vxlan inner-ip command to apply the template to an interface. If a template is not applied to an interface, the VXLAN flexible flow statistics collection will not take effect.
The interface aggregates flows based on the aggregation keywords configured in the template, collects flow statistics, and exports aged flows to the NSC.
Prerequisites
The template must contain at least one aggregation keyword for VXLAN flexible flow statistics collection; otherwise, the template cannot be applied to interfaces. The keyword is configured using the match inner-ip command.
Precautions
Each interface can be configured with only one VXLAN flexible flow statistics template. Before changing a flexible flow statistics template in the same interface view, run the undo netstream record vxlan inner-ip command to delete the existing configuration.
If a VXLAN flexible flow statistics template has been applied to the interface, the template configuration cannot be modified or deleted.
- The CE12800E configured with FD-X series cards supports the application of the NetStream flexible flow statistics template in the Layer 3 sub-interface view, and does not support the application of the NetStream flexible flow statistics template in the Layer 2 sub-interface view.
- The CE12800E configured with ED-E, EG-E, and EGA-E series cards and CE12800 series switches support the application of the NetStream flexible flow statistics template in the Layer 3 or Layer 2 sub-interface view.
Example
# Configure a flexible flow statistics template abc1 and apply it to an interface.
<HUAWEI> system-view [~HUAWEI] netstream record abc1 vxlan inner-ip [*HUAWEI-netstream-record-vxlan-abc1] match inner-ip destination-address [*HUAWEI-netstream-record-vxlan-abc1] collect counter bytes [*HUAWEI-netstream-record-vxlan-abc1] quit [*HUAWEI] commit [~HUAWEI] interface 10ge 1/0/1 [~HUAWEI-10GE1/0/1] netstream record abc1 vxlan inner-ip
netstream record vxlan inner-ip (system view)
Function
The netstream record vxlan inner-ip command creates a VXLAN flexible flow statistics template or displays the view of an existing VXLAN flexible flow statistics template.
The undo netstream record vxlan inner-ip command deletes a VXLAN flexible flow statistics template.
By default, no VXLAN flexible flow statistics template is configured.
Parameters
Parameter |
Description |
Value |
|---|---|---|
record-name |
Specifies the name of a VXLAN flexible flow statistics template. |
The value is a string of 1 to 32 case-sensitive characters without spaces. If the string is enclosed in double quotation marks (" "), the string can contain spaces. |
Usage Guidelines
Usage Scenario
The original Ethernet frame information in VXLAN packets cannot be collected in NetStream original, aggregation, IPv4 flexible, or IPv6 flexible flow statistics collection. To obtain original Ethernet frame information in VXLAN packets, configure exporting of VXLAN flexible flow statistics. You need to create a VXLAN flexible flow statistics template before configuring exporting of VXLAN flexible flow statistics.
Precautions
A maximum of 16 flexible flow statistics templates can be configured on a switch. To configure the 17th flexible flow statistics template, run the undo netstream record vxlan inner-ip (system view) command to delete an existing one first.
The flexible flow statistics template that has been applied to an interface cannot be modified or deleted. To delete it, run the undo netstream record vxlan inner-ip (interface view) command on the interface and then modify or delete the template.
VXLAN flexible flow statistics templates can have the same names as IPv4 and IPv6 flexible flow statistics templates.
netstream mpls-aware ip
Function
The netstream mpls-aware ip command sets the MPLS packet sampling method.
The undo netstream mpls-aware ip command restores the default setting.
By default, only the IP packets encapsulated in the MPLS packets are sampled.
Format
netstream mpls-aware { ip-only | label-and-ip | label-only } ip
undo netstream mpls-aware [ ip-only | label-and-ip | label-only ] ip
The CE12800E does not support this command.
Parameters
| Parameter | Description | Value |
|---|---|---|
ip-only |
Indicates that only the IP packets encapsulated in the MPLS packets are sampled. |
- |
label-and-ip |
Indicates that both labels and IP packets encapsulated in the MPLS packets are sampled. |
- |
label-only |
Indicates that only labels in the MPLS packets are sampled. |
- |
Usage Guidelines
Usage Scenario
On an MPLS network, MPLS labels carry important information that users are concerned about. By default, an NDE samples MPLS packets without labels. You can configure the NDE to sample MPLS labels if necessary.
Precaution
When the MPLS packet sampling method is set to ip-only, you cannot enable MPLS-label aggregation using the netstream aggregation ip command.
netstream sampler
Function
The netstream sampler command configures packet sampling on interfaces.
The undo netstream sampler command restores the default setting.
By default, packet sampling is not configured on interfaces.
Format
netstream sampler random-packets packet-interval { inbound | outbound }
undo netstream sampler [ random-packets packet-interval ] { inbound | outbound }
Parameters
| Parameter | Description | Value |
|---|---|---|
random-packets packet-interval |
Indicates the number of packets between two sampled packets in the packet-based random sampling. Packet-based random sampling indicates that a packet is sampled every packet-interval packets. |
The value is an integer that ranges from 1 to 65535. For details on how to calculate the NetStream sampling rate, see Calculation of the NetStream Sampling Rate. NOTE:
|
inbound |
Samples incoming traffic on an interface. |
- |
outbound |
Samples outgoing traffic on an interface. |
- |
Usage Guidelines
Usage Scenario
If NetStream is enabled on an interface, the system records NetStream-related information in a specific interface information table. If each packet on an interface is collected and counted, forwarding performance of the interface (especially high-speed interfaces) greatly deteriorates. To learn about the traffic characteristics of an interface and at the same time minimize the impact of packet statistics collection on interface forwarding performance, enable NetStream sampling on the interface. A high sampling rate can significantly reduce impact of NetStream on device performance.
Precautions
The packet sampling function configured in the system view takes effect on all interfaces on the device. If the function is configured in both the interface view and system view, the configuration in the interface view takes effect.
- If the FD-X series cards are installed on the CE12800E, the NetStream sampling rate cannot be configured on Eth-Trunk member interfaces, Layer 3 sub-interfaces, or Layer 2 sub-interfaces.
- The CE12800E with ED-E, EG-E, and EGA-E series cards installed does not support the NetStream sampling rate configured in the Layer 3 or Layer 2 sub-interface view. If NetStream is configured on a Layer 3 or Layer 2 sub-interface, the device samples traffic on this sub-interface using the NetStream sampling rate configured in the corresponding main interface view or system view.
If you run the netstream sampler command multiple times in the same view, only the latest configuration takes effect.
The card sends sampled packets to the CPU for processing. When the CPU usage of the card exceeds 65%, the card decreases the CAR value of sampled packets sent to the CPU to 1000 pps. As a result, sampled packets to be sent to the CPU are discarded, decreasing the NetStream sampling rate. When the CPU usage falls below 65%, the card increases the CAR value of sampled packets by 500 pps every 20 seconds until the CAR value is restored to the original setting.
netstream sampler inbound resource snoop
Function
The netstream sampler inbound resource snoop command configures inbound NetStream sampling to use snoop resources.
The undo netstream sampler inbound resource snoop command restores the default configuration.
By default, inbound NetStream sampling uses mirroring resources.
CE12800E does not support this command
Usage Guidelines
Usage Scenario
By default, NetStream sampling uses mirroring resources. When the default configuration is retained, NetStream and port mirroring cannot be configured on the same interface. If you want to use NetStream to collect traffic statistics for accounting and port mirroring to monitor network and locate faults, you need to configure both NetStream and port mirroring on the interface connected to the Internet. In this situation, run the netstream sampler inbound resource snoop command to configure inbound NetStream sampling to use snoop resources. After this command is executed, sampled packets are directly copied to the CPU, but not mirrored; therefore, you can configure port mirroring and inbound NetStream on the same interface.
Pre-configuration Tasks
If the netstream sampler random-packets packet-interval inbound command has been executed in an interface view to configure inbound NetStream sampling, run the undo netstream sampler [ random-packets packet-interval ] inbound command in the interface view to disable the inbound NetStream sampling, and then run the netstream sampler inbound resource snoop command.
If NetStream and port mirroring have been configured on an interface before you run the undo netstream sampler inbound resource snoop command, disable NetStream or port mirroring on the interface, and then run the undo netstream sampler inbound resource snoop command.
Precautions
Snooping resources can only be applied to the inbound direction of an interface.
NetStream sampling using snoop resources conflicts with inbound NetStream sampling configured in an interface view. That is, if NetStream sampling is configured to use snoop resources, you can only configure inbound NetStream sampling in the system view.
netstream timeout ethernet active
Function
The netstream timeout ethernet active command sets the active flow aging time.
The undo netstream timeout ethernet active command restores the default setting.
By default, the active flow aging time is 30 minutes.
Format
netstream timeout ethernet active active-interval
undo netstream timeout ethernet active [ active-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| active-interval | Specifies the active flow aging time. |
The value is an integer that ranges from 1 to 60, in minutes. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active aging time (from flow creation time to the current time) of a flow exceeds the specified active aging time, the flow is exported to the destination.
To quickly detect the status of an active flow, set the active time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the active aging time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ethernet inactive
Function
The netstream timeout ethernet inactive command sets the inactive aging time of Layer 2 NetStream flows.
The undo netstream timeout ethernet inactive command restores the default setting.
By default, the inactive aging time of Layer 2 NetStream flows is 30 seconds.
Format
netstream timeout ethernet inactive inactive-interval
undo netstream timeout ethernet inactive [ inactive-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| inactive-interval | Specifies the inactive aging time of Layer 2 NetStream flows. |
The value is an integer that ranges from 5 to 600, in seconds. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive aging time (from the last packet receiving time to the current time) of a flow exceeds the specified inactive aging time, the flow is exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ip active
Function
The netstream timeout ip active command configures the active aging time of the IPv4 original flows and IPv4 flexible flows.
The undo netstream timeout ip active command restores the default setting.
By default, the active aging time of the IPv4 original flows and IPv4 flexible flows is 30 minutes.
Format
netstream timeout ip active active-interval
undo netstream timeout ip active [ active-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| active-interval | Specifies the active aging time of the IPv4 original flows and IPv4 flexible flows. |
The value is an integer that ranges from 1 to 60, in minutes. The default is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active time (from flow creation time to the current time) of an original or flexible flow exceeds the specified active aging time, the flow is exported to the destination.
To quickly detect the status of an active flow, set the active time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the active time to a large value.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ip inactive
Function
The netstream timeout ip inactive command configures the inactive aging time of the IPv4 original flows and IPv4 flexible flows.
The undo netstream timeout ip inactive command restores the default setting.
By default, the inactive aging time of the IPv4 original flows and IPv4 flexible flows is 30 seconds.
Format
netstream timeout ip inactive inactive-interval
undo netstream timeout ip inactive [ inactive-interval ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
inactive-interval |
Specifies the inactive aging time of the IPv4 original flows and IPv4 flexible flows. |
The value is an integer that ranges from 5 to 600, in seconds. The default is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive time (from the last packet receiving time to the current time) of an original or flexible flow exceeds the specified inactive aging time, the flow is exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ip tcp-session
Function
The netstream timeout ip tcp-session command configures the aging of NetStream traffic according to the FIN flag or the RST flag in the TCP packet header.
The undo netstream timeout ip tcp-session command restores the default setting.
By default, NetStream flows are not aged according to the FIN or RST flag in the TCP packet header.
Usage Guidelines
Usage Scenario
The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated. When receiving a packet with the FIN or RST flag, the device immediately ages the corresponding NetStream flow. If the ip netstream tcp-flag enable command is not run, NetStream flows are aged by following other criteria, for example, inactive aging time or bytes overflow.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
Only original flows can be aged according to the FIN or RST flag in the TCP packet header.
netstream timeout ipv6 active
Function
The netstream timeout ipv6 active command configures the active aging time of the IPv6 original flows and IPv6 flexible flows.
The undo netstream timeout ipv6 active command restores the default setting.
By default, the active aging time of the IPv6 original flows and IPv6 flexible flows is 30 minutes.
Format
netstream timeout ipv6 active active-interval
undo netstream timeout ipv6 active [ active-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| active-interval | Specifies the active aging time of IPv6 original flows and IPv6 flexible flows. | The value is an integer that ranges from 1 to 60, in minutes. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active time (from flow creation time to the current time) of an IPv6 original or IPv6 flexible flow exceeds the specified active aging time, the flow is exported to the destination.
To quickly detect the status of an active flow, set the active time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the active time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ipv6 inactive
Function
The netstream timeout ipv6 inactive command configures the inactive aging time of the IPv6 original flows and IPv6 flexible flows.
The undo netstream timeout ipv6 inactive command restores the default setting.
By default, the inactive aging time of the IPv6 original flows and IPv6 flexible flows is 30 seconds.
Format
netstream timeout ipv6 inactive inactive-interval
undo netstream timeout ipv6 inactive [ inactive-interval ]
Parameters
| Parameter | Description | Value |
|---|---|---|
| inactive-interval | Specifies the inactive aging time of IPv6 original flows and IPv6 flexible flows. | The value is an integer that ranges from 5 to 600, in seconds. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive time (from the last packet receiving time to the current time) of an IPv6 original or flexible flow exceeds the specified inactive aging time, the flow is exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout ipv6 tcp-session
Function
The netstream timeout ipv6 tcp-session command ages NetStream flows according to the FIN or RST flag in the TCP packet header.
The undo netstream timeout ipv6 tcp-session command restores the default setting.
By default, NetStream flows are not aged according to the FIN or RST flag in the TCP packet header.
Usage Guidelines
Usage Scenario
The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated. When receiving a packet with the FIN or RST flag, the device immediately ages the corresponding NetStream flow. If the netstream timeout ipv6 tcp-session command is not run, TCP flows are aged according to the inactive aging time or bytes overflow.
Precaution
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
Only original flows can be aged according to the FIN or RST flag in the TCP packet header.
netstream timeout vxlan inner-ip active
Function
The netstream timeout vxlan inner-ip active command configures the active aging time of VXLAN flexible flows.
The undo netstream timeout vxlan inner-ip active command restores the default setting.
By default, the active aging time of VXLAN flexible flows is 30 minutes.
Format
netstream timeout vxlan inner-ip active active-interval
undo netstream timeout vxlan inner-ip active [ active-interval ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
active-interval |
Specifies the active aging time of VXLAN flexible flows. |
The value is an integer that ranges from 1 to 60, in minutes. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the active aging time (from flow creation time to the current time) of a VXLAN flexible flow exceeds the specified active aging time, the flow is aged out and exported to the destination.
To quickly detect the status of an active flow, set the active time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the active time to a large value.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout vxlan inner-ip inactive
Function
The netstream timeout vxlan inner-ip inactive command configures the inactive aging time of VXLAN flexible flows.
The undo netstream timeout vxlan inner-ip inactive command restores the default setting.
By default, the inactive aging time of VXLAN flexible flows is 30 seconds.
Format
netstream timeout vxlan inner-ip inactive inactive-interval
undo netstream timeout vxlan inner-ip inactive [ inactive-interval ]
Parameters
Parameter |
Description |
Value |
|---|---|---|
inactive-interval |
Specifies the inactive aging time of VXLAN flexible flows. |
The value is an integer that ranges from 5 to 600, in seconds. The default value is 30. |
Usage Guidelines
Usage Scenario
Network traffic may burst intermittently, while the memory capacity of the NDE is limited. Earlier flows in the memory need to be exported to release space for the new flows. The process of exporting old flows is called aging. All flows in the NDE memory will be exported to the NSC for analysis.
When the inactive aging time (from the last packet receiving time to the current time) of a VXLAN flexible flow exceeds the specified inactive aging time, the flow is aged out and exported to the destination.
To quickly detect the status of an inactive flow, set the inactive time to a small value; however, this setting increases the frequency at which NetStream packets are sent. To reduce the frequency at which NetStream packets are exported and improve statistics collecting efficiency, set the inactive time to a large value.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream timeout vxlan inner-ip tcp-session
Function
The netstream timeout vxlan inner-ip tcp-session command configures aging of VXLAN flexible flows according to the FIN or RST flags in the TCP packet headers.
The undo netstream timeout vxlan inner-ip tcp-session command restores the default setting.
By default, VXLAN flexible flows are not aged out according to the FIN or RST flags in TCP packet headers.
Format
netstream timeout vxlan inner-ip tcp-session
undo netstream timeout vxlan inner-ip tcp-session
Usage Guidelines
Usage Scenario
The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated. When receiving a packet with the FIN or RST flag, the switch immediately ages the corresponding NetStream flow. This mechanism saves memory space. If you do not run this command, VXLAN flexible flows can be aged out in other ways, for example, inactive aging time expired and byte overflow.
Precautions
If you set multiple aging modes on the device, a flow is aged when it matches any criterion.
netstream top-talkers ip (system view)
Function
The netstream top-talkers ip command creates a NetStream Top Talkers template or displays the view of an existing NetStream Top Talkers template.
The undo netstream top-talkers ip command deletes the specified NetStream Top Talkers template.
By default, no NetStream Top Talkers template exists.
Parameters
| Parameter | Description | Value |
|---|---|---|
talker-name |
Specifies the name of a NetStream Top Talkers template. |
The value is a string of 1 to 32 case-sensitive characters without spaces. If the character string is quoted by double quotation marks, the character string can contain spaces. |
Usage Guidelines
Usage Scenario
If no NetStream server is located on a network or traffic statistics cannot be exported to a NetStream server according to security requirements, you can configure the NetStream Top Talkers function to monitor network running in real time. NetStream Top Talkers filters traffic based on user-defined keywords, collects statistics on filtered traffic, sorts the traffic in a certain order, and displays only the top N traffic lines on screen. (N is the number of traffic lines recorded in the NetStream Top Talkers template). Before configuring the NetStream Top Talkers function, run the netstream top-talkers ip command to create a NetStream Top Talkers template.
Precautions
When a physical device is virtualized into multiple VSs, each VS supports a maximum of 16 NetStream Top Talkers templates.
If a physical device is not virtualized into VSs, the device supports a maximum of 16 NetStream Top Talkers templates.
To configure a 17th template, run the undo netstream top-talkers ip command to delete an existing one first.
netstream top-talkers ip (interface view)
Function
The netstream top-talkers ip command applies a NetStream Top Talkers template to an interface.
The undo netstream top-talkers ip command deletes a NetStream Top Talkers template from an interface.
By default, a NetStream Top Talkers template is not applied to any interface.
Format
netstream top-talkers talker-name ip { inbound | outbound }
undo netstream top-talkers talker-name ip { inbound | outbound }
Parameters
| Parameter | Description | Value |
|---|---|---|
talker-name |
Indicates the name of the NetStream Top Talkers template to be applied to an interface. |
The value must be the name of an existing NetStream Top Talkers template. |
inbound |
Indicates that the NetStream Top Talkers template collects statistics on and sorts incoming traffic on an interface. |
- |
outbound |
Indicates that the NetStream Top Talkers template collects statistics on and sorts outgoing traffic on an interface. |
- |
Usage Guidelines
Usage Scenario
After a NetStream Top Talkers template is configured, run the netstream top-talkers ip command in the interface view to apply the template to an interface; otherwise, the NetStream Top Talkers function cannot be implemented. You can configure the NetStream Top Talkers template to collect statistics on and sort incoming or outgoing traffic on an interface.
Prerequisites
A NetStream Top Talkers template has been created using the netstream top-talkers talker-name ip command in the system view. Before applying a NetStream Top Talkers template to an interface, set the number of Top Talkers that can be recorded in the NetStream Top Talkers template, Top Talker sorting order, and statistics collection period; otherwise, the template cannot take effect on the interface. To set the preceding parameters, run the top number, sort-by, and cache-timeout commands.
Precautions
A maximum of two NetStream Top Talkers templates can be applied to one interface, which are used to collect and sort incoming and outgoing traffic separately.
The switches (except for the CE12800E) support the application of the NetStream Top Talkers template in the Layer 3 or Layer 2 sub-interface view.
Example
# Create the NetStream Top Talkers template named test and configure the template to collect statistics on and sort incoming traffic on 10GE1/0/2.
<HUAWEI> system-view [~HUAWEI] netstream top-talkers test ip [*HUAWEI-netstream-top-talkers-test] top number 200 [*HUAWEI-netstream-top-talkers-test] sort-by bytes [*HUAWEI-netstream-top-talkers-test] cache-timeout 3600000 [*HUAWEI-netstream-top-talkers-test] quit [*HUAWEI] interface 10GE 1/0/2 [*HUAWEI-10GE1/0/2] netstream top-talkers test ip inbound
netstream top-talkers ip starting
Function
The netstream top-talkers ip starting command starts the NetStream Top Talkers function.
By default, the NetStream Top Talkers function is not started.
Parameters
| Parameter | Description | Value |
|---|---|---|
| talker-name | Specifies the name of a NetStream Top Talkers template. | The value must be the name of an existing NetStream Top Talkers template. |
Usage Guidelines
Usage Scenario
After the NetStream Top Talkers function is configured, you can run this command to start the NetStream Top Talkers function to collect statistics on and sort traffic.
Precautions
The NetStream Top Talkers function can be immediately started only when the NetStream Top Talkers template is applied to an interface.
When the NetStream Top Talkers function has been started on an interface, the NetStream Top Talkers template applied to this interface can also be applied to another interface. In this situation, traffic statistics on the later interface can only be collected in remaining time.
If you modify the NetStream Top Talkers template while the NetStream Top Talkers function is running, the NetStream Top Talkers function becomes invalid, collected traffic statistics are deleted, and traffic is not sorted in order. To restart the NetStream Top Talkers function, you can run this command again or configure the function to restart on schedule.
If you restart the NetStream Top Talkers function while the NetStream Top Talkers function is running, collected traffic statistics are deleted, traffic is not sorted in order, and the NetStream Top Talkers function restarts.
reset netstream cache ethernet
Function
The reset netstream cache ethernet command forcibly ages Layer 2 NetStream flow statistics on a card.
Format
reset netstream cache ethernet slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, Layer 2 flows in the specified slot are forcibly aged out. |
The value depends on the device configuration. |
reset netstream cache ip
Format
reset netstream cache ip slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the actual configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 flows in the specified slot are forcibly aged out. |
The value depends on the device configuration. |
reset netstream cache ipv6
Format
reset netstream cache ipv6 slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 flows in the specified slot are forcibly aged out. |
The value depends on the device configuration. |
reset netstream cache vxlan inner-ip
Function
The reset netstream cache vxlan inner-ip command forcibly ages out VXLAN flexible flows on a card.
Format
reset netstream cache vxlan inner-ip slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. |
Set the value according to the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, VXLAN flexible flows in the specified slot are forcibly aged out. |
The value depends on the device configuration. |
reset netstream statistics ethernet
Function
The reset netstream statistics ethernet command deletes the Layer 2 NetStream flow statistics on the device.
Format
reset netstream statistics ethernet [ slot slot-id [ chip chip-id ] ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. If this parameter is not specified, all Layer 2 NetStream flow statistics on the device are deleted. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, Layer 2 NetStream flow statistics in the specified slot are deleted. |
The value depends on the device configuration. |
Usage Guidelines
Usage Scenario
When diagnosing and locating network faults, collect Layer 2 NetStream flow statistics in a specified period. Before statistics collection starts, you can run this command to delete historical Layer 2 NetStream flow statistics.
Precaution
The reset netstream statistics ethernet command deletes all Layer 2 NetStream flow statistics. The statistics cannot be restored after being deleted. Before running this command, confirm the action.
You can run this command multiple times at any interval.
reset netstream statistics ip
Format
reset netstream statistics ip [ slot slot-id [ chip chip-id ] ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. If this parameter is not specified, all IPv4 flow statistics on the device are deleted. |
The value depends on the actual configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv4 flow statistics in the specified slot are deleted. |
The value depends on the device configuration. |
Usage Guidelines
Usage Scenario
When diagnosing and locating network faults, collect IPv4 flow statistics in a specified period. Before statistics collection starts, you can run this command to delete historical IPv4 flow statistics.
Precautions
The reset netstream statistics ip command deletes all NetStream statistics. The statistics cannot be restored after being deleted. Therefore, confirm the action before running this command.
You can run this command multiple times at any interval.
reset netstream statistics ipv6
Function
The reset netstream statistics ipv6 command deletes the IPv6 flow statistics on the device.
Format
reset netstream statistics ipv6 [ slot slot-id [ chip chip-id ] ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. If this parameter is not specified, all IPv6 flow statistics on the device are deleted. |
The value depends on the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 flow statistics in the specified slot are deleted. |
The value depends on the device configuration. |
Usage Guidelines
Usage Scenario
When diagnosing and locating network faults, collect IPv6 flow statistics in a specified period. Before statistics collection starts, you can run this command to delete historical IPv6 flow statistics.
Precaution
The reset netstream statistics ipv6 command deletes all NetStream statistics. The statistics cannot be restored after being deleted. Before running this command, confirm the action.
You can run this command multiple times at any interval.
reset netstream statistics vxlan inner-ip
Function
The reset netstream statistics vxlan inner-ip command clears the VXLAN flexible flow statistics on a switch.
Format
reset netstream statistics vxlan inner-ip slot slot-id [ chip chip-id ]
Only the CE12800E configured with ED-E, EG-E, and EGA-E series cards supports the chip chip-id parameter.
Parameters
Parameter |
Description |
Value |
|---|---|---|
slot slot-id |
Specifies the slot ID of a card. If this parameter is not specified, all VXLAN flexible flow statistics on the switch are deleted. |
Set the value according to the device configuration. |
chip chip-id |
Specifies a chip ID. If the chip ID is not specified, IPv6 flow statistics in the specified slot are deleted. |
The value depends on the device configuration. |
Usage Guidelines
Usage Scenario
When diagnosing and locating network faults, collect VXLAN flexible flow statistics in a specified period. Before statistics collection starts, you can run this command to delete historical VXLAN flexible flow statistics.
Precautions
The reset netstream statistics vxlan inner-ip command deletes all VXLAN flexible flow statistics. The statistics cannot be restored after being cleared. Before running this command, confirm the action.
You can run this command multiple times at any interval.
sort-by
Function
The sort-by command sets the Top Talkers sorting order in a NetStream Top Talkers template.
The undo sort-by command deletes the Top Talkers sorting order in a NetStream Top Talkers template.
By default, the Top Talkers sorting order is not specified in a NetStream Top Talkers template.
Parameters
| Parameter | Description | Value |
|---|---|---|
| bytes | Indicates that the Top Talkers are sorted in the descending order of bytes. | - |
| packets | Indicates that the Top Talkers are sorted in the descending order of packets. | - |
Usage Guidelines
The NetStream Top Talkers function can filter traffic based on the specified keywords, as well as collect statistics on and sort filtered traffic. You can run the sort-by { bytes | packets } command to sort Top Talkers in descending order of bytes or packets in a NetStream Top Talkers template. To view the Top Talkers statistics and sorting results in a NetStream Top Talkers template, run the display netstream top-talkers ip command.
starting time
Function
The starting time command sets the time when the NetStream Top Talkers function starts.
The undo starting time command deletes the time when the NetStream Top Talkers function starts.
By default, the time when the NetStream Top Talkers function will be started is not set.
Parameters
| Parameter | Description | Value |
|---|---|---|
| time | Specifies the time when the NetStream Top Talkers function starts. The format is hh:mm:ss. | - |
| date | Specifies the date when the NetStream Top Talkers function starts. The format is yy-mm-dd. | - |
Usage Guidelines
Usage Scenario
To start the NetStream Top Talkers function on schedule, run this command.
Precautions
The time when the NetStream Top Talkers function starts must be later than the system time; otherwise, the NetStream Top Talkers function cannot be started.
The NetStream Top Talkers function can be started at the specified time only when the NetStream Top Talkers template is applied to an interface.
When the NetStream Top Talkers function has been started on an interface, the NetStream Top Talkers template applied to this interface can also be applied to another interface. In this situation, traffic statistics on the later interface can only be collected in remaining time.
If you run the netstream top-talkers ip starting command after the starting time time date command, the NetStream Top Talkers function is started immediately. When the specified time is reached, collected traffic statistics are deleted, traffic is not sorted in order, and this function is restarted.
If you modify the NetStream Top Talkers template while the NetStream Top Talkers function is running, the NetStream Top Talkers function becomes invalid, collected traffic statistics are deleted, and traffic is not sorted in order.
template timeout-rate
Function
The template timeout-rate command sets the interval at which the template for exporting aggregation flow statistics in V9 format is refreshed.
The undo template timeout-rate command restores the default setting.
By default, the template is refreshed every 1 minute.
Parameters
| Parameter | Description | Value |
|---|---|---|
timeout-interval |
Specifies the interval for refreshing the V9 template. |
The value is an integer that ranges from 1 to 3600, in minutes. The default value is 1. |
Usage Guidelines
Usage Scenario
When the export version for aggregation flow statistics is set to V9, the template must be exported to the NDA. This command sets the interval for refreshing the V9 template.
If network traffic is heavy, the template refresh interval should be set to a small value; however, this will generate more traffic on the network. You need to set a proper template refresh interval according to network situation. The default refresh interval is recommended if you do not have special requirement.
Precaution
If the default template update interval (30 minutes) is used in V200R001C00 or an earlier version, the interval is automatically changed to 1 minute after the version is upgraded to V200R002C50 or later.
If the default template update interval (1 minute) is used in V200R002C50 or a later version, the interval is automatically changed to 30 minutes after the version is downgraded to V200R001C00 or an earlier version.
Example
# Set the interval at which the V9 template for IPv4 aggregation flow statistics to 60 minutes.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ip source-prefix [*HUAWEI-netstream-aggregation-srcpre] template timeout-rate 60
# Set the interval at which the V9 template for IPv6 aggregation flow statistics to 50 minutes.
<HUAWEI> system-view [~HUAWEI] netstream aggregation ipv6 source-prefix [*HUAWEI-netstream-aggregation-ipv6-srcpre] template timeout-rate 50
top number
Function
The top number command sets the number of Top Talkers that can be recorded in a NetStream Top Talkers template.
The undo top number command deletes the number of Top Talkers that can be recorded in the NetStream Top Talkers template.
By default, the number of Top Talkers that can be recorded in a NetStream Top Talkers template is not set.
Parameters
| Parameter | Description | Value |
|---|---|---|
| number | Indicates the number of Top Talkers that can be recorded in a NetStream Top Talkers template. | The value is an integer that ranges from 1 to 200. |
Usage Guidelines
Usage Scenario
To specify the number of Top Talkers that can be recorded in a NetStream Top Talkers template, run this command.
Precautions
A maximum of 200 Top Talkers can be recorded in a NetStream Top Talkers template. You are advised to set the value to 200 so that sufficient Top Talkers can be recorded in a NetStream Top Talkers template. For example, when the value is set to N, a NetStream Top Talkers template records only the first N Top Talkers even if more than N traffic lines meet the filter condition. When you run the display netstream top-talkers ip command, only the first N Top Talkers are displayed.
- assign forward enp netstream enable
- assign netstream management-plane export rate-limit
- cache-timeout
- collect counter
- collect interface
- description (flexible flow statistics template view)
- display forward enp
- display netstream
- display netstream cache ethernet
- display netstream cache ip aggregation
- display netstream cache ip record
- display netstream cache ip origin
- display netstream cache ipv6 aggregation
- display netstream cache ipv6 record
- display netstream cache ipv6 origin
- display netstream cache vxlan inner-ip record
- display netstream export ethernet template
- display netstream export ip template
- display netstream export ipv6 template
- display netstream export vxlan inner-ip template
- display netstream filter applied-record
- display netstream statistics ethernet
- display netstream statistics ip
- display netstream statistics ipv6
- display netstream statistics vxlan inner-ip
- display netstream top-talkers ip
- enable
- export version
- mask
- match inner-ip
- match ip
- match ip (NetStream Top Talkers template view)
- match ipv6
- netstream aggregation ip
- netstream aggregation timeout ip active
- netstream aggregation timeout ip inactive
- netstream aggregation ipv6
- netstream aggregation timeout ipv6 active
- netstream aggregation timeout ipv6 inactive
- netstream as-mode
- netstream ethernet
- netstream export ethernet host
- netstream export ethernet index-switch
- netstream export ethernet source
- netstream export ethernet template timeout-rate
- netstream export ethernet version
- netstream export ip host
- netstream export ip index-switch
- netstream export ip route disable
- netstream export ip source
- netstream export ip template timeout-rate
- netstream export ip version
- netstream export ipv6 host
- netstream export ipv6 index-switch
- netstream export ipv6 route disable
- netstream export ipv6 source
- netstream export ipv6 template timeout-rate
- netstream export ipv6 version
- netstream export packet-len ethernet-crc
- netstream export vxlan inner-ip host
- netstream export vxlan inner-ip index-switch
- netstream export vxlan inner-ip source
- netstream export vxlan inner-ip template timeout-rate
- netstream export vxlan inner-ip version
- netstream gre-aware ip
- netstream inbound ip filter
- netstream inbound ipv6 filter
- netstream inbound ip filter gre
- netstream inbound ip filter vxlan
- netstream ip
- netstream ipv6
- netstream record ip (interface view)
- netstream record ip (system view)
- netstream record ipv6 (interface view)
- netstream record ipv6 (system view)
- netstream record vxlan inner-ip (interface view)
- netstream record vxlan inner-ip (system view)
- netstream mpls-aware ip
- netstream sampler
- netstream sampler inbound resource snoop
- netstream timeout ethernet active
- netstream timeout ethernet inactive
- netstream timeout ip active
- netstream timeout ip inactive
- netstream timeout ip tcp-session
- netstream timeout ipv6 active
- netstream timeout ipv6 inactive
- netstream timeout ipv6 tcp-session
- netstream timeout vxlan inner-ip active
- netstream timeout vxlan inner-ip inactive
- netstream timeout vxlan inner-ip tcp-session
- netstream top-talkers ip (system view)
- netstream top-talkers ip (interface view)
- netstream top-talkers ip starting
- reset netstream cache ethernet
- reset netstream cache ip
- reset netstream cache ipv6
- reset netstream cache vxlan inner-ip
- reset netstream statistics ethernet
- reset netstream statistics ip
- reset netstream statistics ipv6
- reset netstream statistics vxlan inner-ip
- sort-by
- starting time
- template timeout-rate
- top number