4.4.4 Configuring an IKE Peer.......................................................................................................................123

4.4.5 Configuring an IPSec Proposal..............................................................................................................124

4.4.6 Configuring an IPSec Policy.................................................................................................................125

4.4.7 (Optional) Configuring an IPSec Policy Template................................................................................126

4.4.8 (Optional) Setting Optional Parameters................................................................................................127

4.4.9 Applying an IPSec policy to an interface..............................................................................................129

4.4.10 Checking the Configuration.................................................................................................................129

4.5 Maintaining IPSec..........................................................................................................................................130

4.5.1 Displaying the IPSec Configuration......................................................................................................130

4.5.2 Clearing IPSec Information...................................................................................................................130

4.6 Configuration Examples.................................................................................................................................131

4.6.1 Example for Manually Establishing an SA...........................................................................................131

4.6.2 Example for Establishing an SA Through IKE Negotiation.................................................................137

5 NetStream Configuration.........................................................................................................146

5.1 Overview of NetStream..................................................................................................................................147

5.2 NetStream Features Supported by the SPU....................................................................................................148

5.3 Collecting IPv4 Traffic Statistics...................................................................................................................149

5.3.1 Establishing the Configuration Task.....................................................................................................149

5.3.2 Enabling NetStream on an Interface......................................................................................................150

5.3.3 (Optional) Configuring the Version of Exported Packets.....................................................................150

5.3.4 Setting the Destination Address of the Statistics...................................................................................151

5.3.5 (Optional) Aging the TCP Traffic by Its FIN or RST Flag...................................................................151

5.3.6 (Optional) Configuring the Inactive Aging Time for the Original Traffic............................................152

5.3.7 (Optional) Configuring the Active Aging Time for the Original Traffic..............................................152

5.3.8 Checking the Configuration...................................................................................................................152

5.4 Collecting IPv6 Traffic Statistics...................................................................................................................153

5.4.1 Establishing the Configuration Task.....................................................................................................153

5.4.2 Enabling NetStream on an Interface......................................................................................................153

5.4.3 Setting the Destination Address of the Statistics...................................................................................154

5.4.4 (Optional) Aging the TCP Traffic by Its FIN or RST Flag...................................................................155

5.4.5 (Optional) Configuring the Inactive Aging Time for the Original Traffic............................................155

5.4.6 (Optional) Configuring the Active Aging Time for the Original Traffic..............................................156

5.4.7 Checking the Configuration...................................................................................................................156

5.5 Collecting MPLS Traffic Statistics.................................................................................................................156

5.5.1 Establishing the Configuration Task.....................................................................................................157

5.5.2 Enabling NetStream on an Interface......................................................................................................157

5.5.3 (Optional) Configuring the Version of Exported Packets.....................................................................158

5.5.4 Setting the Destination Address of the Statistics...................................................................................158

5.5.5 (Optional) Configuring the Inactive Aging Time for the Original Traffic............................................159

5.5.6 (Optional) Configuring the Active Aging Time for the Original Traffic..............................................159

5.5.7 Checking the Configuration...................................................................................................................159

5.6 Configuring the Aggregation Statistics About Traffic...................................................................................160

Issue 01 (2012-03-15)

Huawei Proprietary and Confidential

Contents

viii

Table of Contents