You can configure a single template to export either IPv4 or MPLS flow data with. However, when you actually configure sampling to send packets to the service-pic (or ms-dpc), you can not simultaneously sample and send both mpls and ipv4 packets to the pic/dpc. So its either or. Either you are sampling on the CE/VRF side (IPv4) or the core side (MPLS).
________________________________ From: Chris Evans <[email protected]> To: Derick Winkworth <[email protected]> Cc: [email protected] Sent: Wed, September 1, 2010 8:48:53 AM Subject: Re: [j-nsp] Netflow / JFlow questions Hrm.. That documentation is very wishy/washy, like usual. ARGH so frustrating to always deal with Juniper vague documentation.. If I can configure both templates, then what does it exactly mean that I cannot sample at the same time? It it documented anywhere that the M cannot do what I'm asking?? I'm guessing the answer is no? On Tue, Aug 31, 2010 at 10:33 PM, Derick Winkworth <[email protected]> wrote: Its not possible on an M... Its one or the other, IPv4 or MPLS... > >http://www.juniper.net/techpubs/software/junos/junos94/swconfig-policy/configuring-active-flow-monitoring-using-version-9.html > > > >"You can define a version 9 flow record template suitable for IPv4 traffic, MPLS >traffic, or a combination of the two. However, you can sample packets from only >one type of family (inet or mpls) at the same time." > > > > > > >________________________________ >From: Chris Evans <[email protected]> > >To: [email protected] >Sent: Tue, August 31, 2010 8:01:44 PM > >Subject: [j-nsp] Netflow / JFlow questions > > >Have a few questions for some folks who have implemented JFlow.. > >I have a working jflow setup with basic ipv4 and ingress collection on a m7i >with a services pic and also on a MX platform with the MS-DPC blade. > >#1 - Is egress netflow supported? It appears that only ingress is supported. >#2 - Why do all examples that I can find say to use a firewall filter to >sample traffic, I have successfully used the 'set interface xx-x/x/x unit xx >family inet sample' command. This appears to be the new way of doing it. >#3 - In my lab I have a MPLS VPN setup and am trying to netflow interfaces >within the VRF. As it appears the device can only do ingress netflow I also >need to sample the mpls interface. Does anyone have an example of how to >gather netflow stats from both the vrf and mpls pe <> p interfaces? > > >Thanks > >Chris >_______________________________________________ >juniper-nsp mailing list [email protected] >https://puck.nether.net/mailman/listinfo/juniper-nsp >_______________________________________________ >juniper-nsp mailing list [email protected] >https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
