How do I configure flow statistics aggregation?

Steps
 

Log in to a station that has access to the NSP system.


Open a console window.


Issue the following RESTCONF API call to specify what data/aggregation types are enabled for collection:

Note: In order to issue a RESTCONF API call, you require a token; see the My First NSP API Client tutorial on the Network Developer Portal for information.

PATCH https://address:443/restconf/data/flowconf:config/policies/aggregation

where address is the NSP cluster advertised address

The message body is the following:

{

    "aggregation" : [

      {

            "enabled" : "true",

        }

    ]

}

The following table shows the data and aggregation types that can be enabled, as well as their default state and protocol.

Table 3-1: Data types and aggregation types

Data type

Aggregation type

Default

Mode

Protocol

BASIC_IPV4

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIASYS

CONVERSATION_TRAFFIC

AGG_CONVERSATION_IPV4

true

SYS

FLOW_INFO_10_NOKIASYS

CONVERSATION_TRAFFIC

AGG_CONVERSATION_IPV6

true

SYS

FLOW_INFO_10_NOKIASYS

CONVERSATION_TRAFFIC

AGG_INTERFACE_CONVERSATION_IPV4

true

SYS

FLOW_INFO_10_NOKIASYS

CONVERSATION_TRAFFIC

AGG_INTERFACE_CONVERSATION_IPV6

true

SYS

FLOW_INFO_10_NOKIASYS

ESTIMATED_BITRATE

AGG_LSP_STACK

true

SYS

FLOW_INFO_10_NOKIASYS

HOST_TRAFFIC

AGG_HOST_IPV4

true

SYS

FLOW_INFO_10_NOKIASYS

HOST_TRAFFIC

AGG_HOST_IPV6

true

SYS

FLOW_INFO_10_NOKIASYS

HOST_TRAFFIC

AGG_INTERFACE_HOST_IPV4

true

SYS

FLOW_INFO_10_NOKIASYS

HOST_TRAFFIC

AGG_INTERFACE_HOST_IPV6

true

SYS

FLOW_INFO_10_NOKIASYS

L2_IP

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIASYS

MPLS

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIASYS

NAT_SESSION_END

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIABBNAT

NAT_SESSION_END_SHORT

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIABBNAT

NAT_SESSION_START

AGG_RAW

false

SYS

FLOW_INFO_10_NOKIABBNAT

NETFLOW_V5

AGG_RAW

false

SYS

FLOW_INFO_5_DEFAULT

OBSERVED_TRAFFIC

AGG_INTERFACE

true

SYS

FLOW_INFO_10_NOKIASYS

OBSERVED_TRAFFIC

AGG_TOS

true

SYS

FLOW_INFO_10_NOKIASYS

PROTOCOL_TRAFFIC

AGG_PROTOCOL

true

SYS

FLOW_INFO_10_NOKIASYS

TRAFFIC_VOLUME

AGG_SRC_AS_DEST_AS

true

SYS

FLOW_INFO_10_NOKIASYS

TRAFFIC_VOLUME

AGG_VPN_IPV4

true

SYS

FLOW_INFO_10_NOKIASYS

TRAFFIC_VOLUME

AGG_VPN_IPV6

true

SYS

FLOW_INFO_10_NOKIASYS


Issue the following RESTCONF API call to specify the length of the aggregation intervals for each data type:

Note: In order to issue a RESTCONF API call, you require a token; see the My First NSP API Client tutorial on the Network Developer Portal for information.

PATCH https://address:443/restconf/data/flowconf:config/policies/agg-interval

where address is the NSP cluster advertised address

The message body is the following:

{

    "agg-interval" : [

      {

            "duration" : "3",

        }

    ]

}

Note: The settings in the above example represent the default values.

Note: The statistics collection interval affects NSP Flow Collector performance. A larger interval results in proportionally larger files, which take longer to store and transfer.

Note: For CGNAT statistics, you must set the collection interval no higher than the following, based on the expected flow rate:

  • 350 000 flows/s—1 minute

  • 50 000 flows/s—5 minutes

  • 25 000 flows/s—15 minutes

The following table shows the aggregation intervals that can be configured, as well as their default state and protocol.

Table 3-2: Aggregation intervals

Entry

Default

Mode

Protocol

BASIC_IPV4

15

SYS

FLOW_INFO_10_NOKIASYS

CONVERSATION_TRAFFIC

15

SYS

FLOW_INFO_10_NOKIASYS

ESTIMATED_BITRATE

1

SYS

FLOW_INFO_10_NOKIASYS

HOST_TRAFFIC

15

SYS

FLOW_INFO_10_NOKIASYS

L2_IP

15

SYS

FLOW_INFO_10_NOKIASYS

MPLS

15

SYS

FLOW_INFO_10_NOKIASYS

NAT_SESSION_END

1

SYS

FLOW_INFO_10_NOKIABBNAT

NAT_SESSION_END_SHORT

1

SYS

FLOW_INFO_10_NOKIABBNAT

NAT_SESSION_START

1

SYS

FLOW_INFO_10_NOKIABBNAT

NETFLOW_V5

15

SYS

FLOW_INFO_5_DEFAULT

OBSERVED_TRAFFIC

15

SYS

FLOW_INFO_10_NOKIASYS

PROTOCOL_TRAFFIC

15

SYS

FLOW_INFO_10_NOKIASYS

TRAFFIC_VOLUME

15

SYS

FLOW_INFO_10_NOKIASYS


Close the console window.

End of steps