Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configure Active Flow Monitoring Logs for NAT44/NAT64

date_range 01-Dec-23

Overview

Active Flow Monitoring logs are generated for NAT44 /NAT64 sessions to create or delete events on MX-SPC3 devices.

Requirements

This example uses the following hardware and software components:

  • MX480 and MX960 with MX-SPC3
  • Junos OS Release 21.2R1

Configuration

To configure Active Flow Monitoring logging on MX-SPC3 devices, perform these tasks:

  1. Configure the collectors on an interface.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log collector c1 destination-address 10.30.1.2
    user@host# set services jflow-log collector c1 destination-port 1055
    user@host# set services jflow-log collector c1 source-ip 10.30.1.1
  2. Configure the collector groups.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log collector-group cg1 collector c1
  3. Configure the template profiles and associate the template profile with the collector or collector group.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log template-profile t1 collector-group cg1
  4. Associate the template profile with the template type.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log template-profile t1 template-type nat
  5. Associate the template profile with the version.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log template-profile t1 version ipfix
  6. Assign the refresh-rate values.

    content_copy zoom_out_map
    [edit]
    user@host# set services jflow-log template-profile t1 refresh-rate packets 100
    user@host# set services jflow-log template-profile t1 refresh-rate seconds 60
  7. Associate the template profile with the service set.

    content_copy zoom_out_map
    [edit]
    user@host# set services service-set ss1 jflow-log template-profile t1

Results

From the configuration mode, confirm your configuration by entering the show services jflow-log command in configuration mode. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.

content_copy zoom_out_map
user@host# show services jflow-log
collector c1 {
   destination-address 10.30.1.2;
   destination-port 1055;
   source-ip 10.30.1.1;
}
collector-group cg1 {
   collector c1;
}
template-profile t1 {
   collector-group cg1;
   template-type nat;
   version ipfix;
   refresh-rate {
      packets 100;
      seconds 60;
   }
}
footer-navigation