mirror of
https://github.com/akvorado/akvorado.git
synced 2025-12-12 06:24:10 +01:00
docs: add a documentation on how to operate Akvorado
Currently, how to configure routers.
This commit is contained in:
80
console/data/docs/04-operations.md
Normal file
80
console/data/docs/04-operations.md
Normal file
@@ -0,0 +1,80 @@
|
|||||||
|
# Operations
|
||||||
|
|
||||||
|
## Router configuration
|
||||||
|
|
||||||
|
Each router should be configured to send flows to Akvorado inlet
|
||||||
|
service and accepts SNMP requests.
|
||||||
|
|
||||||
|
### NCS 5500 and ASR 9000
|
||||||
|
|
||||||
|
On each router, Netflow can be enabled with the following configuration:
|
||||||
|
|
||||||
|
```cisco
|
||||||
|
sampler-map sampler1
|
||||||
|
random 1 out-of 30000
|
||||||
|
!
|
||||||
|
flow exporter-map akvorado
|
||||||
|
version v9
|
||||||
|
options interface-table timeout 10
|
||||||
|
options vrf-table timeout 10
|
||||||
|
options sampler-table timeout 10
|
||||||
|
template options timeout 10
|
||||||
|
!
|
||||||
|
transport udp 2055
|
||||||
|
source Loopback20
|
||||||
|
destination <akvorado-ip> vrf private
|
||||||
|
!
|
||||||
|
flow monitor-map monitor1
|
||||||
|
record ipv4
|
||||||
|
exporter akvorado
|
||||||
|
cache entries 100000
|
||||||
|
cache timeout active 15
|
||||||
|
cache timeout inactive 2
|
||||||
|
cache timeout rate-limit 2000
|
||||||
|
!
|
||||||
|
flow monitor-map monitor2
|
||||||
|
record ipv6
|
||||||
|
exporter akvorado
|
||||||
|
cache entries 100000
|
||||||
|
cache timeout active 15
|
||||||
|
cache timeout inactive 2
|
||||||
|
cache timeout rate-limit 2000
|
||||||
|
!
|
||||||
|
```
|
||||||
|
|
||||||
|
Optionally, AS path can be pushed to the forwarding database and the
|
||||||
|
source and destination AS will be present in Netflow packets:
|
||||||
|
|
||||||
|
```
|
||||||
|
router bgp <asn>
|
||||||
|
address-family ipv4 unicast
|
||||||
|
bgp attribute-download
|
||||||
|
!
|
||||||
|
address-family ipv6 unicast
|
||||||
|
bgp attribute-download
|
||||||
|
```
|
||||||
|
|
||||||
|
To enable Netflow on an interface, use the following snippet:
|
||||||
|
|
||||||
|
```cisco
|
||||||
|
interface Bundle-Ether4000
|
||||||
|
flow ipv4 monitor monitor1 sampler sampler1 ingress
|
||||||
|
flow ipv6 monitor monitor2 sampler sampler1 ingress
|
||||||
|
!
|
||||||
|
```
|
||||||
|
|
||||||
|
Also check the [troubleshooting section](05-troubleshooting.md) on how
|
||||||
|
to scale Netflow on the NCS 5500.
|
||||||
|
|
||||||
|
Also, SNMP needs to be enabled:
|
||||||
|
|
||||||
|
```cisco
|
||||||
|
snmp-server community <community> RO IPv4
|
||||||
|
snmp-server ifindex persist
|
||||||
|
control-plane
|
||||||
|
management-plane
|
||||||
|
inband
|
||||||
|
interface all
|
||||||
|
allow SNMP peer
|
||||||
|
address ipv4 <akvorado-ip>
|
||||||
|
```
|
||||||
Reference in New Issue
Block a user