Management

 View Only
last person joined: 22 days ago 

Ask questions and share experiences with Junos Space and network management.
Back to discussions
Expand all | Collapse all

QFX5120 - Flow-Based Telemetry for VXLANs

  • 1.  QFX5120 - Flow-Based Telemetry for VXLANs

    Posted 16 days ago

    Hi all,

    I'm setting up Flow-Based Telemetry for VXLANs on a QFX5120. I've followed the documentation exactly, but no data is arriving at the Collector.

    I followed the configuration guide in the link below:  Flow-Based Telemetry for VXLANs (QFX5120)

    Device information: 

    • Model: qfx5120-48y-8c
    •  Junos: 23.4R2-S2.1
    • License:  
      License usage: 
                                 Licensed     Licensed    Licensed
                                  Feature      Feature     Feature
  Feature name                       used    installed      needed    Expiry
  bgp                                   1            1           0    permanent
  isis                                  0            1           0    permanent
  filter-based-forwarding               0            1           0    permanent
  connectivity-fault-management         0            1           0    permanent
  vrrp                                  0            1           0    permanent
  dot1q-tunneling                       0            1           0    permanent
  vxlan                                 1            1           0    permanent
  ovsdb                                 0            1           0    permanent
  PCEP                                  0            1           0    permanent
  mc-lag                                0            1           0    permanent
  esi-lag                               1            1           0    permanent
  Timing License                        0            1           0    permanent
  link-fault-management                 0            1           0    permanent
  evpn-vxlan                            1            1           0    permanent
  igmp-multicast                        0            1           0    permanent
  pim                                   0            1           0    permanent
  gre_tunnel                            0            1           0    permanent
  static-mpls                           0            1           0    permanent
  rip                                   0            1           0    permanent
  ospf                                  0            1           0    permanent
  switching-vc-license                  0            1           0    permanent
  inmon-sflow                           1            1           0    permanent

    My configuration : 

    ##Service
set services inline-monitoring traceoptions file FBT
set services inline-monitoring traceoptions file size 10m
set services inline-monitoring traceoptions file files 10
set services inline-monitoring template TEMP_01 template-refresh-rate 10
set services inline-monitoring template TEMP_01 template-id 1024
set services inline-monitoring template TEMP_01 flow-inactive-timeout 10
set services inline-monitoring template TEMP_01 template-type ipv4-template
set services inline-monitoring template TEMP_01 flow-monitoring sampling-rate 1
set services inline-monitoring instance INLINE_MNT template-name TEMP_01
set services inline-monitoring instance INLINE_MNT collector COLLECTOR source-address 172.25.200.31
set services inline-monitoring instance INLINE_MNT collector COLLECTOR destination-address 172.25.245.241
set services inline-monitoring instance INLINE_MNT collector COLLECTOR dscp 21
set services inline-monitoring instance INLINE_MNT collector COLLECTOR destination-port 9995
##Firewall
set firewall family inet filter VLAN_245 term rule1 then count VLAN245
set firewall family inet filter VLAN_245 term rule1 then inline-monitoring-instance INLINE_MNT
set firewall family inet filter VLAN_245 term rule1 then accept
## Interface IRB
set interfaces irb unit 245 family inet filter input VLAN_245
set interfaces irb unit 245 family inet address 172.25.245.1/24

    -- Note: 172.25.200.31 is IP interface em0

    -- I confirmed that IP 172.25.200.31 can reach 172.25.245.241. There are no ACLs or policies blocking traffic between them

    Statistics:

    root@Device> show services inline-monitoring statistics fpc-slot 0   
  IMON Statistics
    FPC Slot: 0
        Instance Name: INLINE_MNT
        Flow aged out count: 29663
        Flow learnt count: 29675

    - Log debug :

    Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_template,567) Config read..
template-name          TEMP_01
refresh-rate           10
opt-refresh-rate       0
observ-domain-id       0
template-id            400
opt-template-id        0
flow-active-timeout    0
flow-inactive-timeout  10
template-type          0
data-conf-bitmask      0x0
Dec  8 16:11:19 IMON_DEBUG:(imon_config_process,1650) 'services inline-monitoring instance' config is present/changed
Dec  8 16:11:19 IMON_DEBUG:(imon_instance_node_create,67) Instance INLINE_MNT allocated (0xfe2400)
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_instance,772) Instance INLINE_MNT, Template TEMP_01, clip length 0
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_instance,776) Collector config is present/changed
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_collector,607) Collector config read..
    collector-name   COLLECTOR
    dscp             21
    destination-port 9995
    sampling-rate    0
    forwarding-class 0
    routing-instance
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_collector,613) src_ipaddr 1fc819ac
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_collector,620) dst_ipaddr f1f519ac
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_instance,785) Read collector COLLECTOR to index 0
Dec  8 16:11:19 IMON_DEBUG:(imon_config_read_instance,793) 1 collectors configured
Dec  8 16:11:19 IMON_DEBUG:(imon_config_process,1686) Number of instances: 1
 
Dec  8 16:11:19 IMON_DEBUG:(imon_config_process,1717) 'services inline-monitoring' config is present/changed
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_instances,1306) Comparing Instances
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_collectors,920) Comparing Collectors new[COLLECTOR] old [COLLECTOR]
Dec  8 16:11:19 IMON_DEBUG:(imon_collector_config_check,1238) Collector COLLECTOR has NOT changed
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_templates,1262) Comparing Templates
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_config,1379) Instance INLINE_MNT has not changed
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_config,1409) Compare Done
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_global_config,1423) Global config is not changed
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_global_config,1444) Global config flow export timer is not changed
Dec  8 16:11:19 IMON_DEBUG:(imon_compare_global_config,1461) Comparing global config done
Dec  8 16:11:19 IMON_DEBUG:(imon_rtsock_push_all_instances,207) Pushing all instances to kernel
Dec  8 16:11:19 IMON_DEBUG:(imon_inst_index_mark,66) Index 0 Already marked!
 
Dec  8 16:11:19 IMON_DEBUG:(imon_rtsock_push_all_instances,260) Ignoring instance INLINE_MNT
Dec  8 16:11:19 IMON_DEBUG:(imon_rtsock_push_global,280) Pushing global node 0 to kernel
Dec  8 16:11:19 IMON_DEBUG:(imon_rtsock_push_global,288) key 0, enc_buf f95b60, buf_len 16
Dec  8 16:11:19 IMON_DEBUG:(imon_info_free,145) Freeing instance INLINE_MNT at (0xfe2400)
Dec  8 16:11:19 IMON_DEBUG:(imon_info_free,154) Freeing template TEMP_01 at (0xff2200)
Dec  8 16:11:19 IMON_DEBUG:(imon_info_free,145) Freeing instance INLINE_MNT at (0xfe2000)
Dec  8 16:11:19 IMON_DEBUG:(imon_info_free,154) Freeing template TEMP_01 at (0xff2000)
Dec  8 16:11:20 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:11:20 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:11:20 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:11:20 IMON_DEBUG:(imon_sync_signal_handler,91)
Dec  8 16:11:30 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:11:30 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:11:30 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:11:30 IMON_DEBUG:(imon_sync_signal_handler,91)
Dec  8 16:11:40 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:11:40 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:11:40 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:11:40 IMON_DEBUG:(imon_sync_signal_handler,91)
Dec  8 16:11:50 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:11:50 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:11:50 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:11:50 IMON_DEBUG:(imon_sync_signal_handler,91)
Dec  8 16:12:00 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:12:00 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:12:00 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:12:00 IMON_DEBUG:(imon_sync_signal_handler,91)
Dec  8 16:12:10 IMON_DEBUG:(imon_ev_handler,81)
Dec  8 16:12:10 IMON_DEBUG:(imon_resolve_vrf,1773) imon_vrf_configured is 0
Dec  8 16:12:10 IMON_DEBUG:(imon_resolve_vrf,1776) Nothing to resolve, returning.
Dec  8 16:12:10 IMON_DEBUG:(imon_sync_signal_handler,91)

    I have verified that no packets are reaching the Collector from the device. Could there be a misconfiguration or a parameter mismatch that I might have missed?

    Thanks



    ------------------------------
    HieuDC - Network Engineer
    ------------------------------