Page 2
Abstract This document provides configuration procedures for Protocol Flow Information eXport (IPFIX) feature for the Ethernet Routing Switch 8600, 8300, 5000, and 4500 series as well as information pertaining to the Avaya IP Flow Manager. Revision Control Date Version...
Enabling IPFIX globally and on a port level ..............18 Setting the IPFIX timers ....................18 Adding a Collector ......................19 IPFIX Configuration Examples for the ERS 5000 or ERS 4500 ........20 IPFIX Basic Configuration for Ethernet Routing Switch: ..........20 Avaya’s IP Flow Manager (IPFM) ..................22 IPFM Supported Devices ....................
Italic text in a Courier New font indicates text the user must enter or select in a menu item, button or command: ERS5520-48T# show running-config Output examples from Avaya devices are displayed in a Lucinda Console font: ERS5520-48T# show running-config ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 5520-24T-PWR ! Software version = v5.0.0.011...
ERS4500 ERS8300 ERS8600 Software Level introduction Metering and Collecting Collector Default 9995 UDP Port Collector Avaya IP Flow Manager (IPFM), NetQoS Harvester/Collector, Fluke Collector Supported Filters Supported Number of IPFIX Collectors Supported Exported Traffic Protocol type Source IP ...
Page 6
The switch will automatically enable IPFIX again when CPU utilization returns to less than 50% or there is 5 Mb of system memory available. The disabling and enabling of IPFIX will not affect the IPFIX configuration. 3 – Required R/RS modules, not supported on legacy modules Avaya Inc. – External Distribution...
Exported traffic from the switch is in Netfow v9 format using UDP as the transport protocol using UDP port 9995. The export interval, which specifies the interval at which updates are sent to the collector, is configurable. Avaya Inc. – External Distribution...
To enable ipfix port Ipfix configuation on a specified port PPCLI: ERS-8600# config ip ipfix port <slot|port> ? Sub-Context: Current Context: all-traffic <enable|disable> flush [export-and-flush] hash-key <id> hash-polynomial [coeffs <value>] [seed <value>] info sampling-rate <1-100000> Avaya Inc. – External Distribution...
Page 9
(0) is used. info Displays current configuration. sampling-rate Configures the IPFIX sampling rate from 1 to 10,000 for every N packets. The default setting is 1 for continuous monitoring. Avaya Inc. – External Distribution...
30 minutes. export-interval Specifies the interval, in seconds, between exports. Range is from 10 to 3600 seconds. Default value is 50 seconds. exporter-state Indicates whether IPFIX is enabled or disabled on the switch. info Displays configuration. Avaya Inc. – External Distribution...
Note: If you do not specify a slot, the command applies to all slots. <ipaddr> Specifies the IP address of the collector you are adding. protocol Specifies the protocol to use. UDP is the default. dest-port Specifies the destination port. Avaya Inc. – External Distribution...
IP address for the switch on the IPFIX collector instead of a possible two if two CPU cards are used. The configuration is as shown below. CLI: ERS-Switch(config)# sys mgmt-virtual-ip <ipaddr/mask> ERS-Switch(config)# udpsrc-by-vip PPCLI: ERS-Switch# config sys set mgmt-virtual-ip <ipaddr/mask> ERS-Switch# config sys set udpsrc-by-vip enable Avaya Inc. – External Distribution...
ERS-8600# config ip ipfix state enable ERS 8600: Step 2 – Enable IPFIX on port 7/26 CLI: ERS-8600(config)# interface gigabitEthernet 7/26 ERS-8600(config-if)#ip ipfix enable ERS-8600(config-if)# exit PPCLI: ERS-8600# config ip ipfix port 7/26 all-traffic enable Avaya Inc. – External Distribution...
Page 14
ERS-8600# config ip ipfix slot 7 active-timeout 30 ERS 8600: Step 4 – Add the IPFIX Collector CLI: ERS-8600(config)# ip ipfix collector 7 172.30.30.20 enable PPCLI: ERS-8600# config ip ipfix slot 7 collector add 172.30.30.20 enable true Avaya Inc. – External Distribution...
Page 15
ERS-8600# show ip ipfix collector 7 PPCLI: ERS-8600# show ip ipfix collector-info 7 Result: ================================================================================ IPFIX Collector-Info ================================================================================ SlotNum Collector Enable Protocol Dest-Port Exporter Protocol IP-Address State IP-Address Version -------------------------------------------------------------------------------- 172.30.30.20 true 9995 0.0.0.0 preipfixv9 Avaya Inc. – External Distribution...
Page 18
APR 12 16:17:34 00:00:00:00:01:0a 4235095 Total number of Displayed Flows on Slot 7 : 1 Notice that under the Protocol column that ‗FiltVlan‘ is displayed to indicate that IPFIX flows displayed are based on the ACL settings. Avaya Inc. – External Distribution...
LINE slot list for standalone; 1- n high stack) ERS-Stackable(config)# ip ipfix slot 1 ? aging-interval Set flow record aging interval ERS-Stackable(config)# ip ipfix slot 1 aging-interval ? <0-2147400> aging interval value (seconds) Avaya Inc. – External Distribution...
5. IPFIX Configuration Examples for the ERS 5000 or ERS 4500 5.1 IPFIX Basic Configuration for Ethernet Routing Switch: For this configuration example, we will configure the following: Enable IPFIX collecting on a standalone Ethernet Routing Switch ports 12 and 13 ...
Page 22
Step 2 – To view the IPFIX collector configuration information, enter the following: ERS-Stackable(config)# show ip ipfix collector Result: Collector 1 ------------ IP Address 172.30.30.20 Network Protocol Destination Port 9995 Exporter IP Address 0.0.0.0 Protocol Version preipfixv9 State enabled Avaya Inc. – External Distribution...
6. Avaya’s IP Flow Manager (IPFM) Avaya‘s IP Flow Manager (IPFM) application can be used as an IPFIX collector to analyze IP flow from any NetFlow v5 or NetFlow v9 enabled devices. All management is provided through a Web- based user interface.
Page 24
Following are the 12 VoIP protocols supported out of the box in IPFM: SIP-TLS (MS OCS) RTP/RTCP-CS1000 RTP/RTCP-BCM RTP/RTCP-IPSets RTP/RTCP_ITG Voice-H.323 Voice-Megaco-H.248 Voice-MGCP Unistim-CS1000 Unistim-BCM Unistim-MCS Avaya Inc. – External Distribution...
Page 25
IPFM allows the user to configure thresholds to facilitate monitoring of the network without continually watching onscreen reports. Four Event notifications are available (one per threshold): SNMPv1 (Trap) Syslog Email (SMTP) PCAP (for ERS 8600 only) Avaya Inc. – External Distribution...
Page 26
ERS. Thresholds can be disabled / enabled any time. Events generated by traffic exceeding the thresholds will show in the events window on the IPFM Dashboard. Avaya Inc. – External Distribution...
Make sure all of the following services are running. Nortel UCM JBoss AS Nortel UCM IPFIX Collector Nortel UCM License Service Nortel UCM MySQL If some process is not running then further investigation will be needed in that specific area. Avaya Inc. – External Distribution...
Page 28
Execute the following command to create IPFM tables For Windows collectorCtrl.bat recreatedb For RHEL ./collectorCtrl.sh recreatedb Restart UCM JBoss service and wait for few minutes for JBoss initialization to complete successfully. Restart IPFM Collector Service. Avaya Inc. – External Distribution...
Ensure that ERS 86XX device has set the boot config flag: "ftpd" to true. (Use "show bootconfig flags" command to view the bootconfig flags) Ensure that ERS 86XX device has set "File capture mode" to use "PCMCIA" device.(Use "show diag pcap info" command to view the Pcap config flags). Avaya Inc. – External Distribution...
Page 30
If a management port is not configured or does not have a valid route to the IP Flow Manager, use a VLAN IP address of your choice as the IP address when you add Avaya Inc. – External Distribution...
Page 31
Packet sampling methods such as Cisco's NetFlow are widely employed by large networks to reduce the amount of traffic data measured. The main drawback of packet sampling is that it is inherently a lossy process, discarding Avaya Inc. – External Distribution...
IPFM UI after the license service is restarted. In Internet Explorer browser IPFM runs and is rendered slowly with compared to Firefox browser. Thus user is always recommended to use Firefox browser instead of Internet Explorer. Avaya Inc. – External Distribution...