Configuring Flow Exports on Huawei CloudEngine Series Switches

For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller.

Flexible NetStream configuration

Huawei CloudEngine series switches support Flexible NetStream flow export. Execute the following commands to enable flow export configuration:

netstream export ip index-switch 32
netstream timeout ip active 1
netstream timeout ip inactive 15
netstream template ip timeout 1
netstream export ip source source interfaceIP
netstream export ip host NFAserver IP 9996

netstream export ip version 9
netstream record NetFlow ip
match ip tos match ip protocol
match ip source-address
match ip destination-address
match ip source-port
match ip destination-port
collect counter packets
collect counter bytes
collect interface input
collect interface output

Execute these commands under all interfaces of the device:

netstream record NetFlow ip
netstream inbound ip

sFlow configuration

sFlow export can happen only over the default user datagram protocol (UDP) port 6343 to the machine on which Site24x7 On-Premise Poller is installed. It is not configurable in the device. Execute the following commands:

system-view

Configure the IP address of the sFlow agent. By default, an sFlow agent uses the IP address of the outbound interface in a route to the sFlow collector as the IP address of sFlow agent. The IP address of an sFlow agent is contained in the data field of sFlow packets, and uniquely identifies an sFlow agent. It is recommended that you configure the IP address of an sFlow agent manually.

sflow agent { ip ip-address | ipv6 ipv6-address } *

Configure the source IP address of sFlow packets. By default, an sFlow agent uses the IP address of the outbound interface in a route destined for the sFlow collector as a source IP address of sFlow packets.

sflow source { ip ip-address | ipv6 ipv6-address } *

Set the parameters for an sFlow collector.
By default, no sFlow collector is configured. A maximum of two sFlow collectors can be configured in the system.

sflow collector collector-id { ip ip-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name | length length-value | udp-port udp-port-number | description description ] *

Commit the configuration:

commit

Execute this command under all interfaces of the device:

interface interface-type interface-number

sflow sampling { collector { collector-id } &<1-2> | rate rate | length length | inbound | outbound }
sflow counter { collector { collector-id } &<1-2> | interval interval

Example:

system-view
sflow agent 1.1.1.1

sflow source 1.1.1.1
sflow collector 1 ip 192.162.1.10

interface 10ge 0/1/2
sflow sampling collector 1 rate 1000 inbound outbound
sflow counter collector 1 interval 60