SRX 1500 啟動netflow步驟
Version9
Juniper SRX Flow Monitoring Sampling 設定步驟如下:
step1: 以telnet登入Juniper SRX設備,進入設定模式。
user@host> configure
Entering configuration mode
[edit]
user@host#
user@host> configure
Entering configuration mode
[edit]
user@host#
step2: 設定J-flow取樣資訊。
user@host# set services flow-monitoring version9 template ipv4-test ipv4-template
user@host# set forwarding-options sampling input rate 100
user@host# set forwarding-options sampling input run-length 0
user@host# set services flow-monitoring version9 template ipv4-test ipv4-template
user@host# set forwarding-options sampling input rate 100
user@host# set forwarding-options sampling input run-length 0
step3: 設定J-flow接收位置及使用的UDP端口。
user@host# set forwarding-options sampling family inet output flow-server < 接收server IP> port <接收server port number>
user@host# set forwarding-options sampling family inet output flow-server < 接收server IP> version9 template ipv4-test
user@host# set forwarding-options sampling family inet output inline-jflow source-address <傳送netflow的IP>
user@host# set forwarding-options sampling family inet output flow-server < 接收server IP> port <接收server port number>
user@host# set forwarding-options sampling family inet output flow-server < 接收server IP> version9 template ipv4-test
user@host# set forwarding-options sampling family inet output inline-jflow source-address <傳送netflow的IP>
step4: 指定要取樣的設備介面。
user@host# set interfaces <介面名稱> unit 0 family inet sampling input
user@host# set interfaces <介面名稱> unit 0 family inet sampling output
介面名稱可為 fe-0/0/0 或是 vlan名稱,可從以下指令確認介面名稱
user@host# show interfaces
user@host# set interfaces <介面名稱> unit 0 family inet sampling input
user@host# set interfaces <介面名稱> unit 0 family inet sampling output
介面名稱可為 fe-0/0/0 或是 vlan名稱,可從以下指令確認介面名稱
user@host# show interfaces
驗證 Juniper SRX Netflow 是否啟用
step1: 以telnet登入Juniper SRX設備。
step2: 確認J-flow取樣資料。
user@host> show services accounting flow
user@host> show services accounting flow
step3: 確認J-flow取樣內容。
user@host> show services accounting aggregation template template-name ipv4-test
user@host> show services accounting aggregation template template-name ipv4-test