Configuration example

Large Scale NAT44 Flow Logging with format2:

  1. A collector node along with other local transport parameters must be defined through an IPFIX export policy.

    
    *A:BNG1>config>service>ipfix# info detail 
    ----------------------------------------------
                ipfix-export-policy "flow-logging" create
                    no description
                    template-format format2
                    collector router "Base" ip 192.168.115.1 create
                        mtu 1500
                        source-address 192.0.2.2
                        template-refresh-timeout min 5 
                        no shutdown
                    exit
                exit
    

    To export flow records using UDP stream, the BB-ISA card must be configured with an appropriate IPv4 address within a designated VPRN. This address (/32) acts as the source for sending all IPFIX records and is shared by all ISA.

  2. After the IPFIX export policy is defined, it must be applied within the NAT policy:

    *A:BNG1>config>service>nat#     info 
    ----------------------------------------------
                nat-policy "mnp" create
                    pool "mnp" router Base
                    ipfix-export-policy "flow-logging"
                exit
    

Flow creation and flow deletion templates for format2, as captured in Wireshark, are shown in Figure: Format2 templates.

Figure: Format2 templates

IPFIX flow creation data set, as captured in Wireshark, is shown in Figure: Flow creation data set.

Figure: Flow creation data set

IPFIX flow destruction data set, as captured in Wireshark, is shown in Figure: Flow destruction.

Figure: Flow destruction