Routing

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
  • 1.  Netflow v9 for ipv4 and ipv6

     
    Posted 12-12-2023 09:33

    Hi,

    I am trying to configure netflow v9 for IPv4 and IPv6, but it seems is not working:

    This is the configuration:

    [edit]
    root@CINE# show chassis fpc 0 | display set 
    set chassis fpc 0 sampling-instance SAMPLE_FPC0_INST0
    set chassis fpc 0 inline-services flow-table-size ipv4-flow-table-size 10
    set chassis fpc 0 inline-services flow-table-size ipv6-flow-table-size 5

    [edit]
    root@CINE# show services | display set                       
    set services flow-monitoring version9 template ipv4 flow-active-timeout 120
    set services flow-monitoring version9 template ipv4 flow-inactive-timeout 15
    set services flow-monitoring version9 template ipv4 template-refresh-rate seconds 30
    set services flow-monitoring version9 template ipv4 ipv4-template
    set services flow-monitoring version9 template ipv6 flow-active-timeout 120
    set services flow-monitoring version9 template ipv6 flow-inactive-timeout 15
    set services flow-monitoring version9 template ipv6 template-refresh-rate seconds 30
    set services flow-monitoring version9 template ipv6 ipv6-template

    [edit]
    root@CINE# show forwarding-options sampling | display set    
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 input rate 1000
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output flow-server 172.18.1.226 port 2055
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output flow-server 172.18.1.226 version9 template ipv4
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet output inline-jflow source-address 172.18.1.1
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output flow-server 172.18.1.226 port 2055
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output flow-server 172.18.1.226 version9 template ipv6
    set forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output inline-jflow source-address 172.18.1.1

    [edit]
    root@CINE# 

    When I commit, I get this error:

    [edit]
    root@CINE# commit 
    [edit forwarding-options sampling instance SAMPLE_FPC0_INST0 family inet6 output inline-jflow]
      sampling inline configuration error
        Can't configure inline output with V5, V8 and V9 collector configured for family inet6

    error: configuration check-out failed

    [edit]
    root@CINE# 

    If I am using IPFIX, it's working.

    Thank you.



    ------------------------------
    Cel Mai
    ------------------------------


  • 2.  RE: Netflow v9 for ipv4 and ipv6

    Posted 12-13-2023 06:10

    Hi,

    I assume this issue is seen on MX series (or a T series) router, please confirm.

    The error message seen upon configuration commit suggest that RE sampling is configured on this router.

    You can check presence of RE sampling configuration on router by running below show CLI command in edit mode.

    # show forwarding-options sampling | display set  | match "version [58]"
    If the output of this show CLI command shows matching lines, you may need to deactivate RE sampling from the router in order to configure and use netflow v9

    Please not that for any given family, only netflow version can be configured.

    Hope this helps. Let me know if you have more queries.

    - Cheers

    Pankaj



    ------------------------------
    Pankaj Malviya
    ------------------------------



  • 3.  RE: Netflow v9 for ipv4 and ipv6

     
    Posted 12-13-2023 06:32

    Thank you for your message.

    This is vMX, but I feel it's going to be the same for the MX series as well.

    [edit]
    root@CINE# show forwarding-options sampling | display set | match "version [58]" 

    [edit]
    root@CINE# 

    The configuration I put in the original message, is all the sampling configuration I have on the router.

    Thank you.



    ------------------------------
    Cel Mai
    ------------------------------



  • 4.  RE: Netflow v9 for ipv4 and ipv6

    Posted 12-19-2023 06:36

    Hi,

    Inline-jflow functionality is same across VMX and physical MX routers.

    The error you are getting is unexpected. I tried your configuration and it worked without errors!

    If you don't mind, can you please share the Junos version you are running and the output of "show chassis hardware"?

    - Cheers

    Pankaj



    ------------------------------
    Pankaj Malviya
    ------------------------------



  • 5.  RE: Netflow v9 for ipv4 and ipv6

     
    Posted 01-04-2024 06:06

    Thank you for your answer, please see below:

    [edit]
    root@CINE# run show version
    Hostname: CINE
    Model: vmx
    Junos: 17.3R3.10
    JUNOS OS Kernel 64-bit  [20180615.4674357_builder_stable_10]
    JUNOS OS libs [20180615.4674357_builder_stable_10]
    JUNOS OS runtime [20180615.4674357_builder_stable_10]
    JUNOS OS time zone information [20180615.4674357_builder_stable_10]
    JUNOS network stack and utilities [20180906.211629_builder_junos_173_r3]
    JUNOS libs [20180906.211629_builder_junos_173_r3]
    JUNOS OS libs compat32 [20180615.4674357_builder_stable_10]
    JUNOS OS 32-bit compatibility [20180615.4674357_builder_stable_10]
    JUNOS libs compat32 [20180906.211629_builder_junos_173_r3]
    JUNOS runtime [20180906.211629_builder_junos_173_r3]
    JUNOS Packet Forwarding Engine Simulation Package [20180906.211629_builder_junos_173_r3]
    JUNOS py extensions [20180906.211629_builder_junos_173_r3]
    JUNOS py base [20180906.211629_builder_junos_173_r3]
    JUNOS OS vmguest [20180615.4674357_builder_stable_10]
    JUNOS OS crypto [20180615.4674357_builder_stable_10]
    JUNOS mx libs compat32 [20180906.211629_builder_junos_173_r3]
    JUNOS mx runtime [20180906.211629_builder_junos_173_r3]
    JUNOS common platform support [20180906.211629_builder_junos_173_r3]
    JUNOS modules [20180906.211629_builder_junos_173_r3]
    JUNOS mx modules [20180906.211629_builder_junos_173_r3]
    JUNOS mx libs [20180906.211629_builder_junos_173_r3]
    JUNOS mtx Data Plane Crypto Support [20180906.211629_builder_junos_173_r3]
    JUNOS daemons [20180906.211629_builder_junos_173_r3]
    JUNOS mx daemons [20180906.211629_builder_junos_173_r3]
    JUNOS Services URL Filter package [20180906.211629_builder_junos_173_r3]
    JUNOS Services TLB Service PIC package [20180906.211629_builder_junos_173_r3]
    JUNOS Services SSL [20180906.211629_builder_junos_173_r3]
    JUNOS Services Stateful Firewall [20180906.211629_builder_junos_173_r3]
    JUNOS Services RPM [20180906.211629_builder_junos_173_r3]
    JUNOS Services PTSP Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Services PCEF package [20180906.211629_builder_junos_173_r3]
    JUNOS Services NAT [20180906.211629_builder_junos_173_r3]
    JUNOS Services Mobile Subscriber Service Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Services MobileNext Software package [20180906.211629_builder_junos_173_r3]
    JUNOS Services Logging Report Framework package [20180906.211629_builder_junos_173_r3]
    JUNOS Services LL-PDF Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Services Jflow Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Services Deep Packet Inspection package [20180906.211629_builder_junos_173_r3]
    JUNOS Services IPSec [20180906.211629_builder_junos_173_r3]
    JUNOS Services IDS [20180906.211629_builder_junos_173_r3]
    JUNOS IDP Services [20180906.211629_builder_junos_173_r3]
    JUNOS Services HTTP Content Management package [20180906.211629_builder_junos_173_r3]
    JUNOS Services Crypto [20180906.211629_builder_junos_173_r3]
    JUNOS Services Captive Portal and Content Delivery Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Services COS [20180906.211629_builder_junos_173_r3]
    JUNOS AppId Services [20180906.211629_builder_junos_173_r3]
    JUNOS Services Application Level Gateways [20180906.211629_builder_junos_173_r3]
    JUNOS Services AACL Container package [20180906.211629_builder_junos_173_r3]
    JUNOS Extension Toolkit [20180906.211629_builder_junos_173_r3]
    JUNOS jfirmware [20180906.211629_builder_junos_173_r3]
    JUNOS Online Documentation [20180906.211629_builder_junos_173_r3]

    [edit]
    root@CINE# run show chassis hardware
    Hardware inventory:
    Item             Version  Part number  Serial number     Description
    Chassis                                VM65787AE898      VMX
    Midplane
    Routing Engine 0                                         RE-VMX
    CB 0                                                     VMX SCB
    FPC 0                                                    Virtual FPC
      CPU            Rev. 1.0 RIOT-LITE    BUILTIN
      MIC 0                                                  Virtual
        PIC 0                 BUILTIN      BUILTIN           Virtual

    [edit]
    root@CINE#



    ------------------------------
    Cel Mai
    ------------------------------



  • 6.  RE: Netflow v9 for ipv4 and ipv6

    Posted 02-08-2024 02:50

    Hi,

    Couldn't reply earlier due to handling higher priority tasks.

    Configuring netflow v9 for family IPv6 is not supported in this release.

    You may want to consider moving to another release like 18.1R1 or higher

    - Cheers



    ------------------------------
    Pankaj Malviya
    ------------------------------