To enable and configure global Cflowd sampling on an NE
Purpose
Cflowd collects statistical data based on traffic flows. A flow is a series of packets in a user session. Cflowd data is used to monitor network usage trends and detect security threats. You can use the NFM-P to configure Cflowd sampling for:
-
global traffic that passes through an NE; you must enable Cflowd globally on an NE before you can configure Cflowd collectors. You can create multiple Cflowd collectors on an NE. Each collector is deleted if Cflowd sampling is disabled.
-
traffic that passed through an ISA-AA group and/or partitions within the group as well as TCP performance data collection for AA applications and application groups; see To configure Cflowd collectors on an ISA-AA group or partition .
-
unicast and multicast traffic on a routing network interface, IES/VPRN L3 access interface, IES/VPRN tunnel interface, and VPRN network interface; see To create an L3 network interface on a routing instance , To configure a tunnel interface on an IES or VPRN , To configure an L3 access interface on an IES site , To configure an L3 access interface on a VPRN site , or To configure a network interface on a VPRN site .
-
traffic that passes through a group interface on an IES or VPRN; see To configure a group interface on an IES or To configure a group interface on a VPRN.
-
traffic that is redirected to Cflowd using an ACL IP or IPv6 filter policy; see To configure an ACL IP filter policy or To configure an ACL IPv6 filter policy.
You can create up to five Cflowd sampling rate profiles per system. Sampling rate profiles allow you to set different sampling rates on a per interface basis. This allows you to choose the appropriate sampling rate based on the services or type of traffic that is to be received or sent through the associated interface.