Configuring Active Flow Monitoring; Configuring Inline Active Flow Monitoring - Juniper EX9200 Features Manual

CHAPTER 3

Configuring Active Flow Monitoring

Configuring Inline Active Flow Monitoring

Copyright © 2017, Juniper Networks, Inc.
Configuring Inline Active Flow Monitoring on page 15
Active flow monitoring is implemented on the Packet Forwarding Engine. The Packet
Forwarding Engine performs functions such as creating and updating flows, and updating
flow records. The flow records are sent out in industry-standard IPFIX format.
The inline active flow monitoring configuration can be broadly classified into four
categories:
Configurations at the
[edit services flow-monitoring]
configure the template properties for inline flow monitoring.
Configurations at the [edit forwarding-options]
configure a sampling instance and associate the template (configured at the
services flow-monitoring]
also configure the flow-server IP address and port number as well as the flow export
rate.
Configurations at the
[edit chassis]
sampling instance with the FPC on which the media interface is present. If you are
configuring sampling of IPv6 or VPLS flows, you must also specify the flow hash table
size.
Configurations at the [edit firewall]
filter for the family of traffic to be sampled. You must attach this filter to the interface
on which you want to sample the traffic.
Before you configure inline active flow monitoring, you should ensure that you have
adequately-sized hash tables for IPv4, IPv6, and VPLS flow sampling. These tables can
use one to fifteen 256K areas. Starting with Junos OS Release 16.1R1 and 15.1F2, the IPv4
table is assigned a default value of 1024. Prior to Junos OS Release 16.1 and 15.1F2, the
IPv4 table is assigned a default value of fifteen 256K areas. The IPv6 table is assigned
a default value of 1024, and the VPLS table is assigned a default value of 1024. When
anticipated traffic volume requires larger tables, allocate larger tables.
hierarchy level—At this level, you
hierarchy level) with the sampling instance. At this level, you
hierarchy level—At this level, you associate the
hierarchy level—At this level you configure a firewall
hierarchy level—At this level, you
[edit
15