Table of Contents

Related Documents

58-NetStream Configuration Examples

Title	Size	Download
58-NetStream Configuration Examples	1.22 MB


H3C S12500R Switch Router Series
NetStream Configuration Examples

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.

The information in this document is subject to change without notice.

Contents

Introduction· 1

Prerequisites· 1

Example: Configuring NetStream statistics analysis· 1

Network configuration· 1

Analysis· 1

Software versions used· 2

Restrictions and guidelines· 2

Procedures· 2

Configuring the device· 2

Configuring IMC· 2

Verifying the configuration· 5

Configuration files· 8

Introduction

This document provides NetStream statistics analysis configuration examples.

Prerequisites

This document is not restricted to specific software or hardware versions.

The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of NetStream.

Example: Configuring NetStream statistics analysis

Network configuration

As shown in Figure 1, configure NetStream on the device to collect and export traffic statistics as follows:

· Randomly capture one packet out of every 256 packets (both inbound and outbound) for NetStream traffic statistics collection on HundredGigE 1/0/1.

· Export the collected traffic statistics to the IMC server with IP address 12.110.2.2/16 and UDP port 6343.

Figure 1 Network diagram

Analysis

To ensure that the device and the IMC server can communicate with each other, add the device to IMC NTA with the correct SNMP community string and port number.

To collect bidirectional traffic statistics on HundredGigE 1/0/1 of the device, enable NetStream for both the inbound and outbound traffic on HundredGigE 1/0/1. Specify a sampler to implement sampled-NetStream as required.

For the device to send NetStream statistics to the IMC server, specify the IMC server with IP address 12.110.2.2/16 and UDP port 6343 as the destination host for NetStream data export.

For the IMC server to analyze the NetStream statistics and generate reports based on the statistics, configure a traffic analysis task in IMC NTA.

Software versions used

This configuration example was created and verified on R3606.

The IMC platform version running on the IMC server is PLAT 7.3 (E0504).

Restrictions and guidelines

NetStream supports only random sampling. The packets are randomly selected out of a group of packets.

By default, interfaces on the device are disabled (in ADM or Administratively Down state). To have an interface operate, you must use the undo shutdown command to enable that interface.

Procedures

Configuring the device

1. Configure SNMP:

# Enable the SNMP agent.

<Device> system-view

[Device] snmp-agent

# Set the read-only community name to public.

[Device] snmp-agent community read public

# Specify the UDP port number for receiving SNMP packets as 161.

[Device] snmp-agent port 161

2. Create sampler 256 in random sampling mode. Set the sampling rate to 8, which indicates that one packet will be randomly selected out of every 256 packets.

[Device] sampler 256 mode random packet-interval n-power 8

3. Configure NetStream:

# Enable NetStream sampling for both incoming and outgoing traffic on HundredGigE1/0/1 with sampler 256.

<Device> system-view

[Device] interface HundredGigE1/0/1

[Device-HundredGigE1/0/1] ip netstream inbound

[Device-HundredGigE1/0/1] ip netstream outbound

[Device-HundredGigE1/0/1] ip netstream inbound sampler 256

[Device-HundredGigE1/0/1] ip netstream outbound sampler 256

[Device-HundredGigE1/0/1] quit

# Specify the IMC server as the NetStream data export destination.

[Device] ip netstream export host 12.110.2.2 6343

Configuring IMC

Adding the device to IMC NTA

1. Log in to IMC.

2. Click the Service tab.

3. From the left navigation pane, select Traffic Analysis and Audit > Settings.

4. On the Settings page that opens, click Device Management.

The Device Management page opens.

5. Click Add.

6. On the Add Device page shown in Figure 2, perform the following steps:

a. Enter the device IP address (12.110.2.1) in the Device IP field.

b. Specify the device name, SNMP community name, SNMP port number, and other parameters as needed.

c. Click OK.

Figure 2 Adding the device to IMC NTA

Deploying NTA server configuration to the device

1. On the Settings page, click Server Management.

The Server List page opens.

2. Click the Modify icon for the NTA server.

3. On the Server Configuration page shown in Figure 3, configure the following parameters:

a. Set port 6343 as the listening port for the server.

b. Select the device (12.110.2.1) in the Traffic Analysis area.

c. Use the default settings for other parameters.

d. Click Deploy.

Figure 3 Server Configuration

Adding a traffic analysis task

1. On the Settings page, click Traffic Analysis Task Management.

The Traffic Analysis Task Management page opens.

2. Click Add.

The Select Task Type page opens.

3. Select Interface and click Next.

The Add Traffic Analysis Task page opens.

4. In the Basic Information area, configure the following settings:

¡ Task Name—Enter a task name. This example uses Interface.

¡ Server—Select 127.0.0.1 from the list.

¡ Reader—Click Select next to the Reader field, select the operator groups that have access to the analysis and reports provided by the task, and click OK.

¡ Vlan Analysis—Select Disable from the list.

¡ Baseline Analysis—Select Enable from the list.

The Enable Automatic Anomaly Detection Based On The Baseline parameter and the Baseline Threshold Setting area are displayed.

¡ Enable Automatic Anomaly Detection Based On The Baseline—Select Disable from the list.

¡ Threshold Alarm—Select Enable from the list.

The Threshold Alarm Settings area is displayed.

5. In the Baseline Threshold Settings area, set the In Threshold to 40% and the Out Threshold to 30%.

6. In the Threshold Alarm Settings area, set the In Threshold to 50 Mbps and the Out Threshold to 30 Mbps.

7. In the Interface Information area, click Select and select interface.

8. Use the default settings for other parameters.

9. Click OK.

Figure 4 Adding an interface traffic analysis task

Verifying the configuration

Verifying the configuration on the device

# Display NetStream data export information.

[Device] display ip netstream export

IP export information:

Flow source interface : HundredGigE 1/0/1

Flow destination VPN instance : Not specified

Flow destination IP address (UDP) : 12.110.2.2 (6343)

Version 5 exported flow number : 0

Version 5 exported UDP datagram number (failed) : 0 (0)

Version 9 exported flow number : 10

Version 9 exported UDP datagram number (failed) : 10 (0)

Verifying the configuration on IMC

1. View the interface traffic analysis task summary reports.

a. Click the Service tab.

b. From the left navigation pane, select Traffic Analysis and Audit > Interface Traffic Analysis Task.

The interface traffic analysis task summary reports are displayed, as shown in Figure 5.

Figure 5 Summary reports for interface traffic analysis tasks

2. View detailed reports for the interface traffic analysis task named Interface:

a. Click the Service tab.

b. From the left navigation tree, select Traffic Analysis and Audit > Interface Traffic Analysis Task.

c. Use either of the following methods to access the report page of interface traffic analysis task Interface:

- In the Summary List area, click the name of interface traffic analysis task.

- On the left navigation pane, move your mouse pointer to the shortcut menu icon next to Interface Traffic Analysis Task, and then select Interface from the menu.