How can I configure NetFlow on Juniper?


Juniper supports flow exports by the routing engine sampling packet headers and aggregating them into flows. Packet sampling is done by defining a firewall filter to accept and sample all traffic, applying that rule to the interface and then configuring the sampling forwarding option.

interfaces {
ge-0/1/0 {
unit 0 {
family inet {
filter {
input all;
output all;
}
address 192.168.1.1/24;
}
}
}
}

firewall {
filter all {
term all {
then {
sample;
accept;
}
}
}
}

forwarding-options {
sampling {
input {
family inet {
rate 100;
}
}
output {
cflowd 192.168.1.100 {
port 2000;
version 5;
}
}
}
}



Author
Andrisoft Team
Date Created
2012-12-26 19:31:36
Date Updated
2017-12-10 01:24:21
Views
2605