Table of Contents
Advertisement
HUAWEI NetEngine5000E Core Router
Configuration Guide - System Management
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ipv6 netstream as-mode { 16 | 32 }
The AS field mode is configured on the router.
By default, the AS field mode on the router is 16 bits.
Step 3 Run:
ipv6 netstream export index-switch { 16 | 32 }
The type of the interface index carried in the NetStream packet output from the router is
configured.
By default, the interface index carried in the NetStream packet output from the router is of 16
bits. Before converting an interface index from 16 bits to 32 bits, ensure that the following
conditions are met:
l Original flows are output in V9 format.
l Aggregated flows are output in V9 format.
----End
6.5.4 (Optional) Enabling Statistics Collection of TCP Flags in
Original Flows
There are six flag bits (URG, ACK, PSH, RST, SYN, and FIN) in a TCP packet header. The
flag bits, together with the destination IP address, source IP address, destination port number,
and source port number of a TCP packet, identifies the function and status of the TCP packet
on a TCP connection. By enabling statistics collection of TCP flags, you can extract the TCP-
flag information from network packets and send it to the NMS. The NMS checks the traffic
volume of each flag and determines whether the network is attacked by TCP packets.
Context
Do as follows on the router where TCP flag statistics are to be collected.
By enabling statistics collection of TCP flags, you can extract the TCP-flag information from
network packets and send it to the NMS. The NMS can thus determine whether there are flood
attacks on the network.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ipv6 netstream tcp-flag enable
Statistics collection of TCP flags in original flows is enabled.
Issue 01 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 NetStream Configuration
155
Advertisement
Table of Contents
