H3C Technologies H3C Intelligent Management Center - Manual (Page 14)

4
• A list of the devices and areas in your network that have no instrumentation.
Identifying the areas that have no network flow instrumentation helps you determine if you can use
alternatives, such as a probe server.
4. Configure devices that have network flow capabilities to forward network flow data for the
interfaces.
In this step, you enable network flow data collection. You can also configure on which interfaces
network flow collection should be enabled.
You need to configure these devices to forward network traffic flow data to the NTA server that
functions as a network flow collector. Therefore, in addition to enabling network flow data on each
of these devices, you configure the NTA server as the flow collector on these devices.
See the vendor documentation for the NTA server information that is needed to configure it to
forward network flow records to the NTA server. The NTA server may be an IMC base platform
server that has the NTA service module deployed on it. Otherwise, it may be a server that is
configured as a dedicated NTA server that communicates with an IMC base platform server in a
distributed or hybrid IMC deployment.
5. As an option, you can configure port mirroring on the routers or switches that do not support any
of the NetStream v5/v9, NetFlow v5/v9, or sFlow v5 protocols, so that the traffic can be mirrored
to the port connecting to the probe server. Then, you can manage the probes in NTA and
configure the probes to send the traffic logs to the NTA server.
6. After you complete the configuration of all network flow data devices, configure the NTA server to
receive and process the network flow records from every device you have configured.
For routers, switches, network flow probes and other devices that support NetStream v5/v9,
NetFlow v5/v9, or sFlow v5, use the Device Management feature under the Settings area of NTA.
For more information on using Device Management to configure NTA to receive network flow data
records for, see "
Device management ."
7. Configure the NTA server to receive and process the network low records from every probe server
you have installed. Use the Probe Management feature under the Settings area to add probes to
NTA.
For more information on using Probe Management to configure NTA to receive network flow data
records from probe servers, see " Probe management ."
NTA provides administrators with access to modify the configuration of an NTA server. From the
server configuration page, you can modify the following NTA server settings:
{
Server description
{
Port that NTA uses to receive flow records on
{
FTP access information
{
Traffic analysis log aggregation policy
{
Filter policy
{
Disk space usage threshold
{
Action to take when the disk space usage threshold is reached
You can also enable and disable NTA processing of flow records from devices and probes on this
page. For more information on configuring these features, see "
Managing NTA servers ."
After you complete these steps, NTA is configured to receive network flow records. However, NTA does
not begin processing or analyzing flow records for any source until you create a traffic analysis task.