diff --git a/console/data/docs/04-operations.md b/console/data/docs/04-operations.md new file mode 100644 index 00000000..cc8c01d1 --- /dev/null +++ b/console/data/docs/04-operations.md @@ -0,0 +1,80 @@ +# Operations + +## Router configuration + +Each router should be configured to send flows to Akvorado inlet +service and accepts SNMP requests. + +### NCS 5500 and ASR 9000 + +On each router, Netflow can be enabled with the following configuration: + +```cisco +sampler-map sampler1 + random 1 out-of 30000 +! +flow exporter-map akvorado + version v9 + options interface-table timeout 10 + options vrf-table timeout 10 + options sampler-table timeout 10 + template options timeout 10 + ! + transport udp 2055 + source Loopback20 + destination vrf private +! +flow monitor-map monitor1 + record ipv4 + exporter akvorado + cache entries 100000 + cache timeout active 15 + cache timeout inactive 2 + cache timeout rate-limit 2000 +! +flow monitor-map monitor2 + record ipv6 + exporter akvorado + cache entries 100000 + cache timeout active 15 + cache timeout inactive 2 + cache timeout rate-limit 2000 +! +``` + +Optionally, AS path can be pushed to the forwarding database and the +source and destination AS will be present in Netflow packets: + +``` +router bgp + address-family ipv4 unicast + bgp attribute-download +! + address-family ipv6 unicast + bgp attribute-download +``` + +To enable Netflow on an interface, use the following snippet: + +```cisco +interface Bundle-Ether4000 + flow ipv4 monitor monitor1 sampler sampler1 ingress + flow ipv6 monitor monitor2 sampler sampler1 ingress +! +``` + +Also check the [troubleshooting section](05-troubleshooting.md) on how +to scale Netflow on the NCS 5500. + +Also, SNMP needs to be enabled: + +```cisco +snmp-server community RO IPv4 +snmp-server ifindex persist +control-plane + management-plane + inband + interface all + allow SNMP peer + address ipv4 +```