Juniper config for flow export (was "Re: Juniper RE: [flow-tools] flow-capture reports PDUs out-of-sequenc e w/Juniper")

Dave Plonka plonka@doit.wisc.edu
Wed, 12 Sep 2001 09:59:19 -0500


[I removed "isp-routing@isp-routing.com" from the recipients
 because I'm not on that list...]

On Wed, Sep 12, 2001 at 01:50:20PM +1000, Solomon Sokolovsky wrote:
> Hi All,
> 
> Could someone please email back a "show chassis hardware" of there
> Juniper which has Netflow active!

AFAIK, any Juniper that has the Internet Processor II ASIC and a proper
JunOS version should support the "forwarding-options sampling output
cflowd" feature.  We're currently using the flow export with JunOS
4.4R1.5 and 5.0R1.4.

That said, I don't know of what use this is to you, but here's our
output (with the "Serial number" information removed):

   > show chassis hardware 
   Hardware inventory:
   Item             Version  Part number  Description
   Chassis                                M10
   Midplane         REV 03   710-001950   
   Power supply A   Rev 04   740-002497   AC
   Power supply B   Rev 04   740-002497   AC
   Display          REV 04   710-001995   
   Host                                   Present
   FEB              REV 12   710-001948   Internet Processor II
   FPC 0           
     PIC 1          REV 02   750-002984   1x OC-12 ATM, MM
   FPC 1           
     PIC 0          REV 02   750-002980   1x G/E, 1000 BASE-SX
     PIC 1          REV 02   750-002984   1x OC-12 ATM, MM
     PIC 2          REV 01   750-002982   1x Tunnel

> Thanks in advance as need some sort of template!

This article in the "flowscan" mailing list:

   http://net.doit.wisc.edu/~plonka/list/flowscan/archive/0792.html

contains a sample config for how to set up a JunOS "firewall filter"
(which I called "CampusIO") to sample packets, and how to set up the
forwarding-options to export in cflowd/NetFlow format.

Dave

-- 
plonka@doit.wisc.edu  http://net.doit.wisc.edu/~plonka  ARS:N9HZF  Madison, WI