Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Huawei IPv6 Config Sample #52

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Huawei IPv6 Config Sample #52

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 35 additions & 5 deletions Huawei/netflow-9.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,42 @@

slot 1
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you can remove "slots" part as this is already referenced in this file
https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-linecards.conf
You can add ipv6 statement in that file

ip netstream sampler to slot self
#
slot 2
ipv6 netstream sampler to slot self
#
ip netstream timeout active 1
ip netstream timeout inactive 15
ip netstream export version 9

ip netstream export version 9 origin-as
#
# this command is only necessary if you run VRP >= 5.0
# it will store interface indices in 32bit counters (as SNMP does) instead of 16bit.
ip netstream export index-switch 32

ip netstream export template timeout-rate 1
ip netstream sampler fix-packets {{device_sample_rate}} inbound
ip netstream export source {IP-ADDRESS}
ip netstream export host{{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

either remove vpn-instance INTERNET, or rename it to vpn-instance <vpn-instance> as that is needed only if they are sending flow traffic over specific VRF instance

#
ipv6 netstream timeout active 1
ipv6 netstream timeout inactive 15
ipv6 netstream export version 9 origin-as
#
ip netstream monitor FLOW-IPv4
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I could not find any references about the ip netstream monitor command. I guess that the FLOW-IPv4 should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound.
ipv4 netstream monitor FLOW-IPv4 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.

ip netstream export host {{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET version 9
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

either remove vpn-instance INTERNET, or rename it to vpn-instance <vpn-instance> as that is needed only if they are sending flow traffic over specific VRF instance

#
ipv6 netstream monitor FLOW-IPv6
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I could not find any references about the ip netstream monitor command. I guess that the FLOW-IPv6 should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound.
ipv6 netstream monitor FLOW-IPv6 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.

#
#
set flow-stat interval 30
ipv6 enable
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove this line ipv6 enable as this is not related to the flow configuration - it is probably enabling ipv6 generally.

ip netstream inbound
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
It is referenced in this file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf

#
ip netstream sampler fix-packets {{device_sample_rate}} inbound
ip netstream export source {{device_sending_ip}}
ip netstream export host {{kentik_ingest_ip_from_UI}} {{kentik_ingest_UDP_port_from_UI}}
# or for randomsampling:
# ip netstream sampler random-packets {{device_sample_rate}} inbound
#
ipv6 netstream inbound
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
you can add it to the interface file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf

ipv6 netstream sampler random-packets {{device_sample_rate}} inbound
ip netstream monitor FLOW-IPv4 inbound
ipv6 netstream monitor FLOW-IPv6 inbound
#