Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Example J-Flow and sFlow configs for Juniper devices

Example J-Flow and sFlow configs for Juniper devices

Created by Justin Wyllys, last modified by MindTouch on Jun 23, 2016

Views: 929 Votes: 0 Revisions: 5

Overview

Juniper Network switches run both HP sFlow flow sampling technology and JFlow, Juniper Networks’ own flow sampling technology. This article contains two examples of sFlow and J-Flow configurations on Juniper products. For more sFlow and J-Flow configuration examples, see the Juniper Networks website at http://www.juniper.net/techpubs/ and http://kb.juniper.net/InfoCenter/index?page=home.

Environment

All NTA versions

Detail

A high-level overview of using sflow on EX Series switches-

Example: Configuring sFlow Technology to Monitor Network Traffic on EX Series Switches

http://www.juniper.net/techpubs/en_U...ex-series.html

 

Please note that in some cases, it has been noted in the Juniper online forums that a single device needs to have all interfaces (not just a few) enabled for egress summarization before egress data will export at all.

Juniper sFlow Configuration

You can perform Juniper switch sFlow configuration using the following sample configuration:

 

sflow {
polling-interval 30;
sample-rate 128;
collector 10.1.2.5 {
udp-port 6343;
}
interfaces ge-0/0/0.0;
interfaces ge-0/0/1.0;
interfaces ge-0/0/2.0;
interfaces ge-0/0/3.0;
interfaces ge-0/0/4.0;
interfaces ge-0/0/5.0;
interfaces ge-0/0/6.0;
interfaces ge-0/0/7.0;
interfaces ge-0/0/8.0;
interfaces ge-0/0/9.0;
interfaces ge-0/0/10.0;
interfaces ge-0/0/11.0;
interfaces ge-0/0/12.0;
interfaces ge-0/0/13.0;
interfaces ge-0/0/14.0;
interfaces ge-0/0/15.0;
interfaces ge-0/0/16.0;
interfaces ge-0/0/17.0;
interfaces ge-0/0/18.0;
interfaces ge-0/0/19.0;
interfaces ge-0/0/20.0;
interfaces ge-0/0/21.0;
interfaces ge-0/0/22.0;
interfaces ge-0/0/23.0 {
polling-interval 30;
sample-rate 128;
}
}

Juniper J-Flow Configuration

Configure Juniper J-Flow devices using a configuration template such as the following:

 

#show interfaces ge-0/0/0
unit 0 {
family inet {
sampling {
input;
output;
}
address 1.1.1.1/30;
}
}
 
#show forwarding-options
sampling {
input {
rate 100;
}
family inet {
output {
flow-server 2.2.2.2 {
port <JFlow port number e.g. 2055,2056>;
version 5;
}
}
}
}

 

Last modified
20:32, 22 Jun 2016

Tags

Classifications

Public