Configuring Discard Accounting
On routing platforms containing a Monitoring Services PIC or an Adaptive Services PIC, you can configure accounting for traffic passing through the routing platform.
To configure discard accounting, include the accounting
group group-name statement at the [edit forwarding-options] hierarchy level:
[edit forwarding-options] accounting group-name { output { cflowd [ hostnames ] { aggregation { autonomous-system; destination-prefix; protocol-port; source-destination-prefix { caida-compliant; } source-prefix; } autonomous-system-type (origin | peer); port port-number; version format; } flow-active-timeout seconds; flow-inactive-timeout seconds; interface { engine-id number; engine-type number; source-address address; } } }
To configure the output flow aggregation, include the cflowd statement. For more information about flow aggregation, see Directing Traffic Sampling Output to a Server Running
the cflowd Application. To configure the interval before
exporting an active flow, include the flow-active-timeout statement. The default value for flow-active-timeout is 1800 seconds. To configure the interval before a flow is considered
inactive, include the flow-inactive-timeout statement.
The default value for flow-inactive-timeout is 60 seconds.
To configure the interface that sends out monitored information, include
the interface statement. Discard accounting is supported
for the Monitoring Services PIC only.
When you apply a firewall filter to a loopback interface, the filter might block responses from the Monitoring Services PIC. To allow responses from the Monitoring Services PIC to pass through for accounting purposes, configure a term in the firewall filter to include the Monitoring Services PIC IP address. For more detailed information about configuring firewall filters, see Guidelines for Configuring Firewall Filters and Guidelines for Applying Standard Firewall Filters.
You can use discard accounting for passive and active flow monitoring.