本节给出了在Juniper设备上配置cflowd/J-Flow导出的步骤。要启用采样并将流记录导出到指定目标地址,请执行以下命令:
forwarding-options {
sampling {
input {
family inet {
rate 100;
run-length 9;
max-packets-per-second 7000;
}
}
{
cflowd <destination address>{
port <port number>;
source-address <source address>;
version <version number>;
no-local-dump;
autonomous-system-type origin;
}
}
}
}
要在特定接口上启用数据包采样,从而进行Flow包分析,请按照以下步骤操作:
interfaces {
ge-1/3/0 {
vlan-tagging;
unit 101 {
vlan-id 101;
family inet {
sampling {
input;
output;
}
address 206.80.253.26/25
}
}
}
}