IPFIX Configuration

Maipu Communication Technology Co., Ltd

No. 16, Jiuxing Avenue
Hi-tech Park
Chengdu, Sichuan Province
People’s Republic of China - 610041
Tel: (86) 28-85148850, 85148041
Fax: (86) 28-85148948, 85148139
URL: http:// www.maipu.com
Email: overseas@maipu.com

Maipu Confidential & Proprietary Information Page 1 of 15

IPFIX Configuration

All rights reserved. Printed in the People’s Republic of China.

No part of this document may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any
language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual
or otherwise without the prior written consent of Maipu Communication Technology Co., Ltd.

Maipu makes no representations or warranties with respect to this document contents and specifically disclaims any implied
warranties of merchantability or fitness for any specific purpose. Further, Maipu reserves the right to revise this document
and to make changes from time to time in its content without being obligated to notify any person of such revisions or
changes.

Maipu values and appreciates comments you may have concerning our products or this document. Please address comments
to:

Maipu Communication Technology Co., Ltd

No. 16, Jiuxing Avenue
Hi-tech Park
Chengdu, Sichuan Province
People’s Republic of China - 610041
Tel: (86) 28-85148850, 85148041
Fax: (86) 28-85148948, 85148139
URL: http:// www.maipu.com
Email: overseas@maipu.com

All other products or services mentioned herein may be registered trademarks, trademarks, or service marks of their
respective manufacturers, companies, or organizations.

Maipu Confidential & Proprietary Information Page 2 of 15

IPFIX Configuration

Maipu Feedback Form

Your opinion helps us improve the quality of our product documentation
and offer better services. Please fax your comments and suggestions to
(86) 28-85148948, 85148139 or email to overseas@maipu.com.

Document Title IPFIX CONFIGURATION

Product Document 1.0
Version Revision
Number
Evaluate this Presentation:
document (Introductions, procedures, illustrations, completeness, arrangement, appearance)
… Good … Fair … Average … Poor

Accessibility:
(Contents, index, headings, numbering)
… Good … Fair … Average … Poor
Editorial:
(Language, vocabulary, readability, clarity, technical accuracy, content)
… Good … Fair … Average … Poor
Your Please check suggestions to improve this document:
suggestions to … Improve introduction … Make more concise
improve the
… Improve Contents … Add more step-by-step procedures/tutorials
document
… Improve arrangement … Add more technical information
… Include images … Make it less technical
… Add more detail … Improve index

If you wish to be contacted, complete the following:

Name Company
Postcode Address
Telephone E-mail

Maipu Confidential & Proprietary Information Page 3 of 15

IPFIX Configuration

Contents

Overview.....................................................................................................5
Brief Introduction to IPFIX........................................................................6
Basic Commands of IPFIX .........................................................................7
IPFIX Application Example ..................................................................... 12
IPFIX Monitoring and Debugging........................................................... 14
Monitoring Commands .......................................................................................... 14
Monitoring Command Examples............................................................................. 14
Debugging Commands.......................................................................................... 15
Debugging Command Examples ............................................................................ 15

Maipu Confidential & Proprietary Information Page 4 of 15

IPFIX Configuration

Overview

Main contents:

z Brief introduction to IPFIX

z Basic commands of IPFIX
z IPFIX application example
z IPFIX monitoring and debugging

Maipu Confidential & Proprietary Information Page 5 of 15

IPFIX Configuration

Brief Introduction to IPFIX

IP Flow Information Export (IPFIX) is to measure the flow of the device.

The packets entering the device are divided into different packet flows
according to the specified attribute. The specified attributes of all packets
in one packet flow must be the same. The information such as the length
of the packet is accumulated in the flow records. Through the statistics
information recorded by the flow, the network manager can analyze and
monitor the flow that passes the device. The information recorded by the
flow can be sent to the work station via the UDP packets for the flow
analysis software to analyze.

Maipu Confidential & Proprietary Information Page 6 of 15

IPFIX Configuration

Basic Commands of IPFIX

Command
ipfix {ingress | egress}
ipfix destination [vrf vrf-name] ip-
address port-number
ipfix source interface-name
ipfix template flow refresh {timers
period | packets packet-count}
ipfix template fields {bgp-as |
bgp_nexthop | out-statistics}
ipfix template option refresh {timers
period | packets packet-count}
ipfix option export
ipfix option export timers period
Configuration
Description
Mode
*To enable the IPFIX config-if-××
monitoring on the interface
*To set the destination config
address and UDP port
number of the IPFIX packets
To set the interface config
referenced by the source
address of the IPFIX packet
To set the update parameters config
of the IPFIX flow template
To set the option fields of the config
IPFIX flow template
To set the update parameters config
of the IPFIX option template
To enable the sending of the config
IPFIX option packets
To set the sending period of config
the IPFIX option packet

Note

The symbol “*” before the command description means that there is the
configuration example to describe the command in details later.

„ ipfix ingress

The command is used to enable the IPFIX on the interface and monitor the
ingress flow. The no format of the command is used to disable the ingress
IPFIX monitoring of the interface.

ipfix ingress
no ipfix ingress

【Default status】 not defined

 Caution

The IPFIX can be monitored only after the flow forwarding is enabled on
the interface.

Maipu Confidential & Proprietary Information Page 7 of 15

IPFIX Configuration

„ ipfix egress

The command is used to enable IPFIX on the interface and monitor the
flow. The no format of the command is used to disable the egress IPFIX
monitoring on the interface.

ipfix egress
no ipfix egress

【Default status】 not defined

 Caution

The IPFIX can be monitored only after the flow forwarding is enabled on
the interface.

„ ipfix destination

The command is used to configure the sending destination address of the

IPFIX packets. The no format of the command is used to cancel the
sending destination address of the IPFIX packets.

ipfix destination [vrf vrf-name] ip-address port-number

no ipfix destination [vrf vrf-name] ip-address port-number
Syntax Description
vrf-name VRF name
ip-address Destination address
port-number The UDP destination port number used by the
IPFIX packet; the value range is 1-65535.
【Default status】 not defined

 Caution

UP to two destination addresses can be configured.

„ ipfix source

The command is used to configure the interface reference by the source

address of the IPFIX packet. The no format of the command is used to
cancel the interface referenced by the source address of the IPFIX packet.

Maipu Confidential & Proprietary Information Page 8 of 15

IPFIX Configuration

ipfix source interface-name

no ipfix source interface-name
Syntax Description
interface-name The interface name

【Default status】 not defined

„ ipfix template flow refresh

The command is used to configure the update parameters of the IPFIX

flow template. The no format of the command is used to restore the
default values of the parameters.

Configure the update period of the IPFIX flow template:

ipfix template flow refresh timers period

no ipfix template flow refresh timers period

Configure the number of the update packets of the IPFIX flow template:

ipfix template flow refresh packets packet-count

no ipfix template flow refresh packets packet-count
Syntax Description
period The update period (minute); the value range is 1-
3600.
packet-count The number of the update packets; the value
range is 1-600.
【Default status】 The update period is 30s, and the number of the update
packets is 20.

„ ipfix template flow fields

The command is used to configure the additional fields of the IPFIX flow
template. The no format of the command is used to cancel the fields.

ipfix template flow fields {bgp-as | bgp-nexthop | out-statistics}

no ipfix template flow fields {bgp-as | bgp-nexthop | out-statistics}
Syntax Description
bgp-as The BGP AS number in the template
bgp-nexthop The next hop of the BGP route in the template
out-statistics The output statistics in the template

Maipu Confidential & Proprietary Information Page 9 of 15

IPFIX Configuration

【Default status】 not defined

„ ipfix template option refresh

The command is used to configure the update parameters of the IPFIX

option template. The no format of the command is used to restore the
default values of the parameters.

Configure the update period of the IPFIX option template:

ipfix template option refresh timers period

no ipfix template option refresh timers period

Configure the number of the update packets of the IPFIX flow template:

ipfix template option refresh packets packet-count

no ipfix template option refresh packets packet-count
Syntax Description
period The update period (minute); the value range is 1-
3600.
packet-count The number of the update packets; the value
range is 1-600.
【Default status】 The update period is 30s, and the number of the update
packets is 20.

„ ipfix option export

The command is used to enable the IPFIX to send the option records. The
no format of the command is used to disable the sending of the option
records.

ipfix option export

no ipfix option export

【Default status】 not defined

„ ipfix option export timers

The command is used to configure the sending period of the IPFIX option
records. The no format of the command is used to restore the default
value of the period.

ipfix option export timers period

Maipu Confidential & Proprietary Information Page 10 of 15

IPFIX Configuration

no ipfix option export timers period

Syntax Description
period The sending period (minute)

【Default status】 The sending period is 30 minutes.

Maipu Confidential & Proprietary Information Page 11 of 15

IPFIX Configuration

IPFIX Application Example

Serve
r

<UDP PORT: 50.1.1.

8888> 2

50.1.1.
1
router
128.255.42.17
2

IPFIX application example

Illustration

The router is responsible for forwarding the flow of two networks.

Meanwhile, it is connected to an internal management network. The server
of the internal management network is 50.1.1.2. The router interface
address connected to the management network is 50.1.1.1. Enable the
IPFIX on the interface with IP address 128.255.42.172 to monitor the
ingress flow. Meanwhile, the IPFIX monitoring information is sent to the
server. The server distributes the UDP destination port number 8888 to
the IPFIX packets.

Router configuration:

Command Description
router(config)# int gigaethernet1 To enter into the interface; the

Maipu Confidential & Proprietary Information Page 12 of 15

IPFIX Configuration
router(config-if-gigaethernet1)#ip address 50.1.1.1
255.255.255.0
router(config-if-gigaethernet1)#exit
router(config)#ip flow enable
router(config)#int gigaethernet0
router(config-if-gigaethernet0)#ip address
128.255.42.172 255.255.252.0
router(config-if-gigaethernet0)#ip route-cache flow
router(config-if-gigaethernet0)#ipfix ingress
router(config-if-serial0/0)#exit
router(config)#ipfix destination 50.1.1.2 8888
Maipu Confidential & Proprietary Information
interface is connected to the internal
management network
To configure the IP address
To exit the interface
To enable the flow forwarding
To enter into the interface; the
interface is the flow monitoring point
of the IPFIX
To configure the IP address
To enable the flow forwarding on the
interface
To enable the IPFIX on the interface
and monitor the ingress flow
To exit the interface
To configure the destination address
and UDP destination port number of
the IPFIX packets
Page 13 of 15
IPFIX Configuration

IPFIX Monitoring and

Debugging

Monitoring Commands
Command
show ipfix statistics
show ipfix flow interface-name
{ingress | egress} [top top-N]
clear ipfix statistics
Description
To display the IPFIX statistics data
To display the current ingress/egress flow information o of
the specified interface
To clear up the statistics data of the IPFIX

Monitoring Command Examples

For environment and configuration, refer to “IPFIX application example”.

router#show ipfix flow g0 ingress

Displayed Result：

PRO SRC DST IF TOS SP DP PKTS BYTES

17 128.255.41.200 128.255.41.255 gigaethernet0 0 138 138 1

229

17 128.255.42.17 128.255.43.255 gigaethernet0 0 138 138 1

208

17 128.255.42.190 128.255.43.255 gigaethernet0 0 137 137 3

234

17 128.255.40.68 128.255.43.255 gigaethernet0 0 138 138 2

436

17 128.255.42.190 128.255.43.255 gigaethernet0 0 138 138 2

404

Maipu Confidential & Proprietary Information Page 14 of 15

IPFIX Configuration

Description and analysis:

PRO: IP protocol number of the monitoring flow;

SRC: The IP source address of the monitoring flow;

DST: The IP destination address of the monitoring flow;

TOS: The TOS of the monitoring flow;

SP: The source port number of the monitoring flow;

DP: The destination port number of the monitoring flow;

PKTS: The packet statistics of the monitoring flow;

BYTES: The byte statistics of the monitoring flow;

The above information displays the current statistics information of all IP

flows entering from g0.

Debugging Commands
Command Description
(no) debug ipfix event To enable/disable the debugging switch of IPFIX event
processing
(no) debug ipfix export To enable/disable the debugging switch of the IPFIX packet
sending

Debugging Command Examples

For the environment, refer to Figure 1-1.

The debug ipfix export command is used to view the IPFIX packet
sending.

router#debug ipfix export

Displayed Result Analysis
00:39:55: IPFIX: Export packets to 50.1.1.2 port 8888 in vrf 0 The IPFIX sending
packets; the destination
address is 50.1.1.2; the
UDP destination port
number is 8888.

Maipu Confidential & Proprietary Information Page 15 of 15