85

Chapter 3 Configuring IPFIX

This chapter describes the function and configuration of the IPFIX feature. For conceptual information about IPFIX, see Internet Protocol Flow Information eXport (IPFIX) on page 39. This chapter includes the following topics:
Topic Overview Configuring IPFIX using Device Manager Configuring IPFIX using the CLI Using the show ip ipfix commands Using FTP to transfer files to the network Configuring the IPFIX local collector IPFIX configuration example 1 IPFIX configuration example 2 Page 85 86 94 104 113 113 114 116

Overview
IPFIX is an Internet Engineering Task Force (IETF) standard that is an improvement of the Netflow V9 protocol. IPFIX allows monitoring of IP flows on Ethernet Routing Switch platforms, as well as on other Nortel switching platforms. An IP flow is defined as a set of packets sent over a period of time that have some common properties. These properties include: Source IP address
Configuring Network Management

86 Chapter 3 Configuring IPFIX

Destination IP address Protocol type Source protocol port Destination protocol port Ingress VLAN ID Ingress port and observation point (VLAN or port)

You can view the flow information using the command line interface (CLI). The flow information is also exported periodically to third party collectors. The collector stores a large number of flow records from several devices in the network. The IPFIX standard specifies the protocol for exporting the flows to the collector, including the formatting of flow records and the underlying transport protocols, such as UDP, TCP, or SCTP. Nortel recommends the use of the third party collector agent called NetQoS.

Note: IPFIX requires R modules.

Configuring IPFIX using Device Manager

You use an Access Control List (ACL) filter to configure IPFIX. This allows you to perform IPFIX on selected flows. This section includes the following topics: Enabling IPFIX globally Configuring a slot for a collector on page 87 Configuring an exporter slot on page 89 Modifying IPFIX on a port on page 90 Viewing IPFIX hash statistics on page 92 Viewing exporter statistics on page 93

314723-E Rev 00

Chapter 3 Configuring IPFIX 87

Enabling IPFIX globally

Before you can configure or use IPFIX, you must globally enable it. To enable IPFIX globally: 1 In Device Manager, select Serviceability > IPFIX. The Ipfix dialog box opens with the Global tab displayed (Figure 19).
Figure 19 IpfixGlobal tab.

2 3

To enable IPFIX on the switch, select enable. Click Apply. IPFIX is enabled globally.

Configuring a slot for a collector

To configure a slot for a collector: 1 In Device Manager, select Serviceability > IPFIX. The Ipfix dialog box opens with the Global tab displayed (Figure 19 on page 87). 2 Click the Collectors/Slots tab. The Ipfix-Collectors/Slots dialog box appears (Figure 20 on page 88).

Configuring Network Management

88 Chapter 3 Configuring IPFIX Figure 20 IpfixCollectors/Slots

Click Insert. The Ipfix, Insert Collectors/Slots dialog box opens (Figure 21).

Figure 21 Ipfix, Insert Collectors/Slots tab

4 5 6 7 8

In SlotNum, enter a slot number. In the Address field, enter the IP address of the Collector. In the ExporterIP field, enter the IP address of the Exporter. Select Enable. Click Insert.

Table 13 on page 89 shows information for the Ipfix, Insert Collectors/Slots parameters.

314723-E Rev 00

Chapter 3 Configuring IPFIX 89

Table 13 Ipfix, Insert Collectors/Slots descriptions

Field SlotNum AddressType Address Protocol DestPort ExporterIpType ExporterIP ProtoVer Enable Description Slot number. An index to the Collector Entry. IP address type of the collector. An index to the Collector Entry. IP address of the collector. An index to the Collector Entry. Protocol for export data from exporter to the collector. Destination port to send the requests. IP address type of the exporter for the collector. IP address of the exporter for the collector. This specifies the protocol version for IPFIX. State of the particular collector. Enable is true by default.

Configuring an exporter slot

To configure an exporter slot: 1 2 Select Serviceability > IPFIX. Click the Exporters/Slots tab. The IpfixExporters/Slots dialog box opens (Figure 22).
Figure 22 IpfixExporters/Slots

3 4

As required, select parameters and change their values. Click Apply.

Configuring Network Management

90 Chapter 3 Configuring IPFIX

Table 14 shows information for the IpfixExporters/Slots parameters.

Table 14 IpfixExporters/Slots descriptions

Field SlotNum AgingIntv ActiveTimeout ExportIntv ExportState TempRefIntvSec Description Slot number. An index to the Collector Entry. Flow record aging interval in seconds. Flow record active timeout value in minutes. Frequency of flow export to collector in seconds. State of exporter. Template refresh timeout. Template is sent out to the collector at least every x seconds or every y exported packets, whichever occurs first. Template refresh timeout. Template is sent out to the collector at least every x seconds or every y exported packets, whichever occurs first.

TempRefIntvPkts

Modifying IPFIX on a port

To modify the IPFIX configuration on a port: 1 2 In Device Manager, select Serviceability > IPFIX. Click the Ports tab. The IpfixPorts dialog box opens (Figure 23 on page 91).

314723-E Rev 00

Chapter 3 Configuring IPFIX 91 Figure 23 IpfixPorts

3 4

As required, select parameters and change their values. Click Apply. New values are shown in the dialog box.

Table 15 shows information for the IpfixPorts parameters.

Table 15 IpfixPorts field descriptions

Field Id SampleRate Description An index to the IpfixConfPortEntry, a unique identifier of the port Id. Configures the sampling rate. Samples one in every N packets.

Configuring Network Management

92 Chapter 3 Configuring IPFIX Table 15 IpfixPorts field descriptions

Field DynamicSampRate HashPolyCoeffs HashPolySeed Flush Description Indicates the dynamic sampling rate. Sets the hash polynomial coefficients. Sets the hash polynomial seed. Deletes all records stored in the COP, or initiates an export of all records and deletes the database after the export finishes. This is used to enable or disable IPFIX on all traffic for the specified port. Hash key ID.

AllTraffic HashKeyId

Viewing IPFIX hash statistics

You can view IPFIX hash statistics. To do so: 1 In Device Manager, select Serviceability > IPFIX. The Ipfix dialog box opens with the Global tab displayed (Figure 19 on page 87). 2 3 Click the Exporters/Slots tab (Figure 22 on page 89). Select a slot and click Graph. The IPFIX Hash StatsSlot Hash tab appears (Figure 24).
Figure 24 IPFIX Hash StatsSlot Hash

You can view the hash statistics for each slot.

314723-E Rev 00

Chapter 3 Configuring IPFIX 93

Table 16 shows information for the IPFIX Hash Stats parameters.

Table 16 IpfixPorts field descriptions

Field HashOverflows HashDrops Description Count of hash overflows per slot. Count of hash drops per slot.

Viewing exporter statistics

1 In Device Manager, select Serviceability > IPFIX. The Ipfix dialog box opens with the Global tab displayed (Figure 19 on page 87). 2 3 4 Click the Collectors/Slots tab (Figure 20 on page 88). Select a slot. Click Graph. The IPFIX Exporter StatsExporter tab appears (Figure 25).
Figure 25 IPFIX Exporter StatsExporter tab

Table 17 shows information for the IPFIX Hash Stats parameters.

Table 17 Exporter StatsExporter tab field descriptions

Field OutPkts Description Number of packets sent.

Configuring Network Management

94 Chapter 3 Configuring IPFIX Table 17 Exporter StatsExporter tab field descriptions

Field OutOctets PktsLoss Description Number of bytes sent. Number of records lost.

Configuring IPFIX using the CLI

You must globally enable IPFIX before you can use any IPFIX commands. This section includes the following topics: Disabling and enabling IPFIX globally Enabling ACL filters on page 95 Enabling IPFIX on an ACL on page 96 Configuring IPFIX parameters on a port on page 97 Configuring IPFIX slot parameters on page 100 Configuring IPFIX collector parameters on page 102

Disabling and enabling IPFIX globally

To globally enable or disable IPFIX, use the following command:
config ip ipfix

This command has the following options:

config ip ipfix
followed by: Show current level parameter settings and next level directories. Enables or disables IPFIX.

info state <enable|disable>

314723-E Rev 00