Files
akvorado/console/data/docs/04-operations.md
Vincent Bernat 58e10f4916 docs: add a documentation on how to operate Akvorado
Currently, how to configure routers.
2022-04-11 16:04:45 +02:00

1.7 KiB

Operations

Router configuration

Each router should be configured to send flows to Akvorado inlet service and accepts SNMP requests.

NCS 5500 and ASR 9000

On each router, Netflow can be enabled with the following configuration:

sampler-map sampler1
 random 1 out-of 30000
!
flow exporter-map akvorado
 version v9
  options interface-table timeout 10
  options vrf-table timeout 10
  options sampler-table timeout 10
  template options timeout 10
 !
 transport udp 2055
 source Loopback20
 destination <akvorado-ip> vrf private
!
flow monitor-map monitor1
 record ipv4
 exporter akvorado
 cache entries 100000
 cache timeout active 15
 cache timeout inactive 2
 cache timeout rate-limit 2000
!
flow monitor-map monitor2
 record ipv6
 exporter akvorado
 cache entries 100000
 cache timeout active 15
 cache timeout inactive 2
 cache timeout rate-limit 2000
!

Optionally, AS path can be pushed to the forwarding database and the source and destination AS will be present in Netflow packets:

router bgp <asn>
 address-family ipv4 unicast
  bgp attribute-download
!
 address-family ipv6 unicast
  bgp attribute-download

To enable Netflow on an interface, use the following snippet:

interface Bundle-Ether4000
 flow ipv4 monitor monitor1 sampler sampler1 ingress
 flow ipv6 monitor monitor2 sampler sampler1 ingress
!

Also check the troubleshooting section on how to scale Netflow on the NCS 5500.

Also, SNMP needs to be enabled:

snmp-server community <community> RO IPv4
snmp-server ifindex persist
control-plane
 management-plane
  inband
   interface all
    allow SNMP peer
     address ipv4 <akvorado-ip>