Huawei IPv6 Config Sample #52
Conversation
I'm not sure if the slot commands at the top are necessary.
| @@ -1,12 +1,42 @@ | |||
|
|
|||
| slot 1 | |||
There was a problem hiding this comment.
you can remove "slots" part as this is already referenced in this file
https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-linecards.conf
You can add ipv6 statement in that file
| ip netstream export template timeout-rate 1 | ||
| ip netstream sampler fix-packets {{device_sample_rate}} inbound | ||
| ip netstream export source {IP-ADDRESS} | ||
| ip netstream export host{{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET |
There was a problem hiding this comment.
either remove vpn-instance INTERNET, or rename it to vpn-instance <vpn-instance> as that is needed only if they are sending flow traffic over specific VRF instance
| ipv6 netstream export version 9 origin-as | ||
| # | ||
| ip netstream monitor FLOW-IPv4 | ||
| ip netstream export host {{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET version 9 |
There was a problem hiding this comment.
either remove vpn-instance INTERNET, or rename it to vpn-instance <vpn-instance> as that is needed only if they are sending flow traffic over specific VRF instance
| # | ||
| # | ||
| set flow-stat interval 30 | ||
| ipv6 enable |
There was a problem hiding this comment.
remove this line ipv6 enable as this is not related to the flow configuration - it is probably enabling ipv6 generally.
| # | ||
| set flow-stat interval 30 | ||
| ipv6 enable | ||
| ip netstream inbound |
There was a problem hiding this comment.
this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
It is referenced in this file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf
| # or for randomsampling: | ||
| # ip netstream sampler random-packets {{device_sample_rate}} inbound | ||
| # | ||
| ipv6 netstream inbound |
There was a problem hiding this comment.
this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
you can add it to the interface file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf
| ipv6 netstream timeout inactive 15 | ||
| ipv6 netstream export version 9 origin-as | ||
| # | ||
| ip netstream monitor FLOW-IPv4 |
There was a problem hiding this comment.
I could not find any references about the ip netstream monitor command. I guess that the FLOW-IPv4 should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound.
ipv4 netstream monitor FLOW-IPv4 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.
| ip netstream monitor FLOW-IPv4 | ||
| ip netstream export host {{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET version 9 | ||
| # | ||
| ipv6 netstream monitor FLOW-IPv6 |
There was a problem hiding this comment.
I could not find any references about the ip netstream monitor command. I guess that the FLOW-IPv6 should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound.
ipv6 netstream monitor FLOW-IPv6 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.
|
@dpajin-kentik can you fix and merge ? This has been open for a while |
I'm not sure if the slot commands at the top are necessary.