How can we help?

How to configure NetFlow on Juniper MX routers

Follow

Juniper devices support Junos Traffic Vision, previously called J-Flow.

These instructions assume:

  • The Juniper MX router is running Junos OS release 13.2 or higher.
  • MS-MIC is installed on the device.
  • The date, time and time zonee are correctly set on the router.
  • You have Telnet or SSH credentials and access to your Juniper MX router.
  • The IP address of your Auvik collector is known.

If you have a shared collector and want to ensure that it receives netflow data to enable TrafficInsights, you will need to add the source IP address as a /32 in order for Auvik to register the flows from that specific address in the TrafficInsights portal. There may be some delay for the shared collector to receive the data after the change.

Note: Even if that source IP address is already being scanned, you must add a /32 targeting only the source IP address, due to some limitations, the collector can’t tell if it should be sent to site A or B.

Access your router CLI

  1. Telnet or SSH into your router.
  2. Enter privileged mode by typing enable and entering your enable password.

Enable NetFlow

Run the following command. Replace AuvikCollectorIP with the IP address of your Auvik collector and AuvikPort with one of the following ports: 2055, 2056, 4432, 4739, 6343, 9995 or 9996.

set chassis fpc 1 sampling-instance NETFLOW-INSTANCE
set chassis network-services ip
set services flow-monitoring  version9 template LM-V9 option-refresh-rate seconds 25
set services flow-monitoring  version9 template LM-V9 template-refresh-rate seconds 15
set services flow-monitoring  version9 template LM-V9 ipv4-template
set forwarding-options sampling instance NETFLOW-INSTANCE input rate 1 run-length 0
set forwarding-options sampling instance NETFLOW-INSTANCE family inet output flow-server <AuvikCollectorIP> port <AuvikPort>
set forwarding-options sampling instance NETFLOW-INSTANCE family inet output flow-server <AuvikCollectorIP> source <Your Router IP>
set forwarding-options sampling instance NETFLOW-INSTANCE family inet output flow-server <AuvikCollectorIP> version9 template LM-V9
set forwarding-options sampling instance NETFLOW-INSTANCE family inet output inline-jflow source-address <Your Router IP>
set interfaces ge-1/3/3 unit 2630 family inet sampling input
set interfaces ge-1/3/3 unit 2630 family inet sampling output

References:

Was this article helpful?
2 out of 3 found this helpful
Have more questions? Submit a request