Tuesday, January 21, 2014

Netflow on ASR9000v

!========== verify PIE ==========
show install active

!========== configure satellite fabric links ==========
vrf asr9kv
  address-family ipv4 unicast

interface loopback xyz
  description Loopback for ASR 9000v unnumbered fabric links
  vrf asr9kv
  ipv4 address 10.0.0.1 255.0.0.0

nv
  satellite 101
    type asr9000v
    description my satellite
    ipv4 address 10.0.0.101 255.0.0.0

interface TenGigabitEthernet 0/x/y/z1
 bundle id 101 mode on

interface TenGigabitEthernet 0/x/y/z2
 bundle id 101 mode on

interface Bundle-Ethernet 101
  vrf asr9kv
  ipv4 point-to-point
  ipv4 unnumbered loopback xyz
  nv
    satellite-fabric-link satellite 1001
      remote-ports GigabitEthernet all

!========== power up satellite ==========


! When satellite is initially connected to ASR9K host, satellite image version could be auto
! discovered. “show nv satellite status” can show if the satellite image is the latest version

show nv satellite status

! If image is not compatible we can push the image from the host to the satellite

show nv satellite status satellite 101

! Iniate transfer if needed

install nv satellite 101 transfer

! Verify the status

show nv satellite status satellite 101

! Optional verification of discovery

show nv satellite protocol discovery brief
show nv satellite protocol discovery interface TenGigE 0/1/0/0

! Show inventory (admin context)
show inventory
show inventory rack

! Debug
Show interface GigE 100/0/0/0
Show nv satellite hardware satellite 100


!========== configure satellite host ports ==========


interface GigabitEthernet 101/0/0/1  !<--- ASR9K starts at port 1 / Satellite starts at port 0
 ipv4 address 62.1.0.1/ 24 !<--- test assigned IP and ping

!========== configure netflow ==========

flow exporter-map flow-exp-map1
 version v9
  options interface-table timeout 600
  options sampler-table timeout 600
  template data timeout 600
  template options timeout 600
 !
 dscp 16
 transport udp 5000
 source Loopback0
 destination 124.106.4.126
!
flow monitor-map flow-mmap-ipv4
 record ipv4 peer-as
 exporter flow-exp-map1
 cache entries 250000
 cache timeout active 600
!
sampler-map flow-sampler-1-in-5k
 random 1 out-of 5000
!

!========== apply netflow to satellite ==========
interface GigabitEthernet 101/0/0/1
 flow ipv4 monitor flow-mmap-ipv4 sampler flow-sampler-1-in-5k ingress

 ! Verify Netflow

 show flow monitor flow-mmap-ipv4 cache internal location 0/Z/CPU0

 ! Punted traffic

 show controllers np counters all

  ! View cache

  sh flow monitor flow-mmap-ipv4 cache format table include layer4 tcp-flags ipv4 sour dest prot tos count pack byte location 0/0/CPU0

  ! Check exporter

  show flow exporter flow-exp-map1 location 0/0/CPU0

  ! Check sampler

  show sampler-map flow-sampler-1-in-5k

  ! Interface Counters

  show interface <intf name> accounting rate

  ! Policer on NPU

  sh flow platform nfea policer np 0 location 0/0/cPU0