-
Notifications
You must be signed in to change notification settings - Fork 20
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Huawei IPv6 Config Sample #52
base: master
Are you sure you want to change the base?
Conversation
I'm not sure if the slot commands at the top are necessary.
@@ -1,12 +1,42 @@ | |||
|
|||
slot 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you can remove "slots" part as this is already referenced in this file
https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-linecards.conf
You can add ipv6 statement in that file
ip netstream export template timeout-rate 1 | ||
ip netstream sampler fix-packets {{device_sample_rate}} inbound | ||
ip netstream export source {IP-ADDRESS} | ||
ip netstream export host{{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
either remove vpn-instance INTERNET
, or rename it to vpn-instance <vpn-instance>
as that is needed only if they are sending flow traffic over specific VRF instance
ipv6 netstream export version 9 origin-as | ||
# | ||
ip netstream monitor FLOW-IPv4 | ||
ip netstream export host {{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET version 9 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
either remove vpn-instance INTERNET
, or rename it to vpn-instance <vpn-instance>
as that is needed only if they are sending flow traffic over specific VRF instance
# | ||
# | ||
set flow-stat interval 30 | ||
ipv6 enable |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
remove this line ipv6 enable
as this is not related to the flow configuration - it is probably enabling ipv6 generally.
# | ||
set flow-stat interval 30 | ||
ipv6 enable | ||
ip netstream inbound |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
It is referenced in this file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf
# or for randomsampling: | ||
# ip netstream sampler random-packets {{device_sample_rate}} inbound | ||
# | ||
ipv6 netstream inbound |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this command should not be in the global configuration mode. It is supposed to be implemented at the interface?
ref: https://support.huawei.com/enterprise/en/doc/EDOC1000174046/3a962da5/netstream-configuration-commands#ip_netstream_2
you can add it to the interface file: https://github.com/kentik/config-snippets/blob/cmcgrath138-patch-1/Huawei/netflow-9-interfaces.conf
ipv6 netstream timeout inactive 15 | ||
ipv6 netstream export version 9 origin-as | ||
# | ||
ip netstream monitor FLOW-IPv4 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I could not find any references about the ip netstream monitor
command. I guess that the FLOW-IPv4
should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound
.
ipv4 netstream monitor FLOW-IPv4 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.
ip netstream monitor FLOW-IPv4 | ||
ip netstream export host {{kentik_ingest_IP}} {{kentik_ingest_PORT}} vpn-instance INTERNET version 9 | ||
# | ||
ipv6 netstream monitor FLOW-IPv6 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I could not find any references about the ip netstream monitor
command. I guess that the FLOW-IPv6
should be the name of the "monitor", but there is no definition of that monitor provided.
You also have below the similar command with inbound
.
ipv6 netstream monitor FLOW-IPv6 inbound
I would remove these commands unless you find the documentation about how they work and why they should be there.
@dpajin-kentik can you fix and merge ? This has been open for a while |
I'm not sure if the slot commands at the top are necessary.