INTEGRA O NETFLOW COM HUAWEI

Criada por Danilo Tomich, Modificado em Thu, 01 Feb 2024 na (o) 03:44 PM por Danilo Tomich

Integrações

Precisamos da chave SNMP
E IP

Favor configurar dessa forma no Huawei.
Muito importante o horário e data esta correto.

Huawei

origin-as

É importante ressaltar que, para que os ASN (Autonomous System Numbers) sejam exportados, é necessário que o roteador possua pelo menos uma tabela de roteamento completa (full routing).

Exemplo de configuração homologada.

Na caixa (Root/Admin)

slot 0 <0-10> ip netstream sampler to slot self ipv6 netstream sampler to slot self

Caixa (Root/Admin/VS)

IPv4

ip netstream export version 9 origin-as bgp-nexthop ttl
ip netstream export template sequence-number fixed
ip netstream export index-switch 32
ip netstream as-mode 32
ip netstream timeout active 1
ip netstream timeout inactive 15
ip netstream export template timeout-rate 1
ip netstream export template option timeout-rate 1
ip netstream export template option application-label
ip netstream sampler fix-packets 1024 inbound
ip netstream sampler fix-packets 1024 outbound
ip netstream export source IP_ORIGEM
ip netstream export host IP_DO_RR_FLOW_API 3055

IPv6

ipv6 netstream export version 9 origin-as bgp-nexthop ttl
ipv6 netstream export template sequence-number fixed
ipv6 netstream export index-switch 32
ipv6 netstream as-mode 32
ipv6 netstream timeout active 1
ipv6 netstream timeout inactive 15
ipv6 netstream export template timeout-rate 1
ipv6 netstream export template option timeout-rate 1
ipv6 netstream sampler fix-packets 1024 inbound
ipv6 netstream sampler fix-packets 1024 outbound
ipv6 netstream export source IP_ORIGEM
ipv6 netstream export host IP_DO_RR_FLOW_API 3055

Sampling será fixo:

undo ip netstream export template option sampler
undo ipv6 netstream export template option sampler

Adicione as interfaces de upstream

interface Virtual-Ethernet0/1/101.408
 description Operadora_1_IPv4
 ip netstream inbound
 ip netstream outbound
interface Virtual-Ethernet0/1/101.409
 description Operadora_1_IPv6
 ipv6 netstream inbound
 ipv6 netstream outbound
interface 40GE0/1/49.2114
 description Operadora_2_IPv4e6
 ip netstream inbound
 ip netstream outbound
 ipv6 netstream inbound
 ipv6 netstream outbound

É de extrema importância que o horário/UTC do roteador exportador de fluxos esteja devidamente configurado.

display clock

Perguntas frequentes

IP_ORIGEM - Normalmente o IP da interface de Loopback.

IP_DO_RR_FLOW_API Endereço IP do servidor RR Flow que irá receber os dados.

Em ambos vc pode configurar somente o IPv4 ou IPv6, exemplo:

ip netstream export source 10.50.50.50 
ip netstream export host 172.16.0.100 3055
 ipv6 netstream export source 10.50.50.50 
ipv6 netstream export host 172.16.0.100 3055

ip netstream export source 2001:db8:ffff:ffff::ffff
ip netstream export host 2001:db8:cafe:d0ce::50 3055
ipv6 netstream export source 2001:db8:ffff:ffff::ffff
ipv6 netstream export host 2001:db8:cafe:d0ce::50 3055

ip netstream inbound | ip netstream outbound Associar às interfaces com IPv4 configurado que irão enviar os fluxos da interfaces. Normalmente apenas as interfaces de upstream.

interface 40GE0/1/49.32   
 vlan-type dot1q 32
description Operadora_IPv4
ip address 10.10.10.6 255.255.255.252
statistic enable
ip netstream inbound 
ip netstream outbound

ipv6 netstream inbound | ipv6 netstream outbound Associar às interfaces com IPv6 configurado que irão enviar os fluxos da interfaces. Normalmente apenas as interfaces de upstream.

interface 40GE0/1/49.128
vlan-type dot1q 128
description Operadora_IPv6 
ipv6 enable 
ipv6 address 2001:DB8:1:1:1::2/64
statistic enable 
ipv6 netstream inbound 
ipv6 netstream outbound

Se a interfaces possuir IPv4 e IPv6

interface 40GE0/1/49.3264
vlan-type dot1q 3264 
description Operadora_IPv6 
ip address 10.10.10.6 255.255.255.252 
ipv6 enable  
ipv6 address 2001:DB8:1:1:1::2/64
statistic enable
ipv6 netstream inbound
ipv6 netstream outbound

INTEGRA O NETFLOW COM HUAWEI

Integrações

Precisamos da chave SNMPE IP

Favor configurar dessa forma no Huawei.Muito importante o horário e data esta correto.

Huawei

Precisamos da chave SNMP
E IP

Favor configurar dessa forma no Huawei.
Muito importante o horário e data esta correto.