Specifying sampling options in filter entries, Filter configurations – Alcatel-Lucent 7750 SR OS User Manual

Page 457

Advertising
background image

Cflowd

7750 SR OS Router Configuration Guide

Page 457

Specifying Sampling Options in Filter Entries

Packets are matched against filter entries to determine acceptability. With cflowd, only the first
packet of a flow is compared. If the first packet matches the filter criteria, then an entry is added to
the cflowd cache. Subsequent packets in the same flow are also sampled based on the cache entry.

Since a filter can be applied to more than one interface (when configured with a

scope

template

), the

interface-disable-sample

option is intended to enable or disable traffic

sampling on an interface-by-interface basis. The command can be enabled or disabled as needed
instead creating numerous filter versions.

When the

cflowd interface

option is configured in the

config>router> interface

context, the following requirements must be met in order to enable traffic sampling on the specific
interface:

1. Cflowd must be enabled.

2. At least one cflowd collector must be configured and enabled.

3. The

interface>cflowd interface

option must be selected. For configuration

information, refer to the Filter Policy Overview sections of the 7750 SR OS Router
Configuration Guide.

4. The

config>filter>ip-filter>entry>interface-disable-sample

option

must be enabled (the default,

no interface-disable-sample

, must be explicitly

modified to

interface-disable-sample

).

5. The filter must be applied to a service or a port.

Filter Configurations

CLI Syntax:

config>filter>ip-filter>entry#

[no] filter-sample

[no] interface-disable-sample

When a filter policy is applied to a service or port, sampling can be configured so that traffic
matching the associated IP filter entry is sampled when the IP interface is set to cflowd ACL mode
and the

filter-sample

command is enabled. If cflowd is either not enabled (no

filter-

sample)

or set to the cflowd interface mode, then sampling does not occur.

When the

interface-disable-sample

command is enabled, then traffic matching the

associated IP filter entry is not sampled if the IP interface is set to cflowd ACL mode.

Advertising