Couldn't reply earlier due to handling higher priority tasks.
Configuring netflow v9 for family IPv6 is not supported in this release.
Original Message:
Sent: 01-04-2024 06:05
From: parau
Subject: Netflow v9 for ipv4 and ipv6
Thank you for your answer, please see below:
[edit]
root@CINE# run show version
Hostname: CINE
Model: vmx
Junos: 17.3R3.10
JUNOS OS Kernel 64-bit [20180615.4674357_builder_stable_10]
JUNOS OS libs [20180615.4674357_builder_stable_10]
JUNOS OS runtime [20180615.4674357_builder_stable_10]
JUNOS OS time zone information [20180615.4674357_builder_stable_10]
JUNOS network stack and utilities [20180906.211629_builder_junos_173_r3]
JUNOS libs [20180906.211629_builder_junos_173_r3]
JUNOS OS libs compat32 [20180615.4674357_builder_stable_10]
JUNOS OS 32-bit compatibility [20180615.4674357_builder_stable_10]
JUNOS libs compat32 [20180906.211629_builder_junos_173_r3]
JUNOS runtime [20180906.211629_builder_junos_173_r3]
JUNOS Packet Forwarding Engine Simulation Package [20180906.211629_builder_junos_173_r3]
JUNOS py extensions [20180906.211629_builder_junos_173_r3]
JUNOS py base [20180906.211629_builder_junos_173_r3]
JUNOS OS vmguest [20180615.4674357_builder_stable_10]
JUNOS OS crypto [20180615.4674357_builder_stable_10]
JUNOS mx libs compat32 [20180906.211629_builder_junos_173_r3]
JUNOS mx runtime [20180906.211629_builder_junos_173_r3]
JUNOS common platform support [20180906.211629_builder_junos_173_r3]
JUNOS modules [20180906.211629_builder_junos_173_r3]
JUNOS mx modules [20180906.211629_builder_junos_173_r3]
JUNOS mx libs [20180906.211629_builder_junos_173_r3]
JUNOS mtx Data Plane Crypto Support [20180906.211629_builder_junos_173_r3]
JUNOS daemons [20180906.211629_builder_junos_173_r3]
JUNOS mx daemons [20180906.211629_builder_junos_173_r3]
JUNOS Services URL Filter package [20180906.211629_builder_junos_173_r3]
JUNOS Services TLB Service PIC package [20180906.211629_builder_junos_173_r3]
JUNOS Services SSL [20180906.211629_builder_junos_173_r3]
JUNOS Services Stateful Firewall [20180906.211629_builder_junos_173_r3]
JUNOS Services RPM [20180906.211629_builder_junos_173_r3]
JUNOS Services PTSP Container package [20180906.211629_builder_junos_173_r3]
JUNOS Services PCEF package [20180906.211629_builder_junos_173_r3]
JUNOS Services NAT [20180906.211629_builder_junos_173_r3]
JUNOS Services Mobile Subscriber Service Container package [20180906.211629_builder_junos_173_r3]
JUNOS Services MobileNext Software package [20180906.211629_builder_junos_173_r3]
JUNOS Services Logging Report Framework package [20180906.211629_builder_junos_173_r3]
JUNOS Services LL-PDF Container package [20180906.211629_builder_junos_173_r3]
JUNOS Services Jflow Container package [20180906.211629_builder_junos_173_r3]
JUNOS Services Deep Packet Inspection package [20180906.211629_builder_junos_173_r3]
JUNOS Services IPSec [20180906.211629_builder_junos_173_r3]
JUNOS Services IDS [20180906.211629_builder_junos_173_r3]
JUNOS IDP Services [20180906.211629_builder_junos_173_r3]
JUNOS Services HTTP Content Management package [20180906.211629_builder_junos_173_r3]
JUNOS Services Crypto [20180906.211629_builder_junos_173_r3]
JUNOS Services Captive Portal and Content Delivery Container package [20180906.211629_builder_junos_173_r3]
JUNOS Services COS [20180906.211629_builder_junos_173_r3]
JUNOS AppId Services [20180906.211629_builder_junos_173_r3]
JUNOS Services Application Level Gateways [20180906.211629_builder_junos_173_r3]
JUNOS Services AACL Container package [20180906.211629_builder_junos_173_r3]
JUNOS Extension Toolkit [20180906.211629_builder_junos_173_r3]
JUNOS jfirmware [20180906.211629_builder_junos_173_r3]
JUNOS Online Documentation [20180906.211629_builder_junos_173_r3]
[edit]
root@CINE# run show chassis hardware
Hardware inventory:
Item Version Part number Serial number Description
Chassis VM65787AE898 VMX
Midplane
Routing Engine 0 RE-VMX
CB 0 VMX SCB
FPC 0 Virtual FPC
CPU Rev. 1.0 RIOT-LITE BUILTIN
MIC 0 Virtual
PIC 0 BUILTIN BUILTIN Virtual
[edit]
root@CINE#
------------------------------
Cel Mai
Original Message:
Sent: 12-19-2023 06:35
From: Pankaj Malviya
Subject: Netflow v9 for ipv4 and ipv6
Hi,
Inline-jflow functionality is same across VMX and physical MX routers.
The error you are getting is unexpected. I tried your configuration and it worked without errors!
If you don't mind, can you please share the Junos version you are running and the output of "show chassis hardware"?
- Cheers
Pankaj
------------------------------
Pankaj Malviya
Original Message:
Sent: 12-13-2023 06:31
From: parau
Subject: Netflow v9 for ipv4 and ipv6
Thank you for your message.
This is vMX, but I feel it's going to be the same for the MX series as well.
[edit]
root@CINE# show forwarding-options sampling | display set | match "version [58]"
[edit]
root@CINE#
The configuration I put in the original message, is all the sampling configuration I have on the router.
Thank you.
------------------------------
Cel Mai
Original Message:
Sent: 12-13-2023 02:02
From: Pankaj Malviya
Subject: Netflow v9 for ipv4 and ipv6
Hi,
I assume this issue is seen on MX series (or a T series) router, please confirm.
The error message seen upon configuration commit suggest that RE sampling is configured on this router.
You can check presence of RE sampling configuration on router by running below show CLI command in edit mode.
# show forwarding-options sampling | display set | match "version [58]"
If the output of this show CLI command shows matching lines, you may need to deactivate RE sampling from the router in order to configure and use netflow v9
Please not that for any given family, only netflow version can be configured.
Hope this helps. Let me know if you have more queries.
- Cheers
Pankaj
------------------------------
Pankaj Malviya
Original Message:
Sent: 12-12-2023 04:35
From: parau
Subject: Netflow v9 for ipv4 and ipv6
Hi,
I am trying to configure netflow v9 for IPv4 and IPv6, but it seems is not working:
This is the configuration:
[edit]
root@CINE# show chassis fpc 0 | display set
set chassis fpc 0 sampling-instance SAMPLE_FPC0_INST0
set chassis fpc 0 inline-services flow-table-size ipv4-flow-table-size 10
set chassis fpc 0 inline-services flow-table-size ipv6-flow-table-size 5
[edit]
root@CINE# show services | display set
set services flow-monitoring version9 template ipv4 flow-active-timeout 120
set services flow-monitoring version9 template ipv4 flow-inactive-timeout 15
set services flow-monitoring version9 template ipv4 template-refresh-rate seconds 30
set services flow-monitoring version9 template ipv4 ipv4-template
set services flow-monitoring version9 template ipv6 flow-active-timeout 120
set services flow-monitoring version9 template ipv6 flow-inactive-timeout 15
set services flow-monitoring version9 template ipv6 template-refresh-rate seconds 30
set services flow-monitoring version9 template ipv6 ipv6-template
[edit]
root@CINE# show forwarding-options sampling | display set
set forwarding-options sampling instance SAMPLE_FPC0_INST0 input rate 1000
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output flow-server 172.18.1.226 port 2055
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output flow-server 172.18.1.226 version9 template ipv4
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output inline-jflow source-address 172.18.1.1
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output flow-server 172.18.1.226 port 2055
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output flow-server 172.18.1.226 version9 template ipv6
set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output inline-jflow source-address 172.18.1.1
[edit]
root@CINE#
When I commit, I get this error:
[edit]
root@CINE# commit
[edit forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output inline-jflow]
sampling inline configuration error
Can't configure inline output with V5, V8 and V9 collector configured for family inet6
error: configuration check-out failed
[edit]
root@CINE#
If I am using IPFIX, it's working.
Thank you.
------------------------------
Cel Mai
------------------------------