Contents

Flow monitor commands· 1

display flow-monitor 1

flow-monitor 3

flow-monitor add ip· 4

flow-monitor add mpls· 5

flow-monitor delete ip· 6

flow-monitor delete mpls· 7

flow-monitor fixup· 9

reset flow-monitor entry· 10

reset flow-monitor statistics· 11

 

Flow monitor commands

display flow-monitor

Use display flow-monitor to display information about flow monitor entries.

Syntax

In standalone mode:

display flow-monitor [ invalid ] [ verbose ] [ { ip | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-address | interface interface-type interface-number | source source-address ] * [ slot slot-number ]

In IRF mode:

display flow-monitor [ invalid ] [ verbose ] [ { ip | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-address | interface interface-type interface-number | source source-address ] * [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

invalid: Specifies illegitimate flow monitor entries. If you do not specify this keyword, this command displays information about legitimate flow monitor entries.

verbose: Displays detailed information about flow monitor entries. If you do not specify this keyword, this command displays brief information about flow monitor entries.

ip: Specifies IP flow monitor entries.

mpls: Specifies MPLS flow monitor entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays information about flow monitor entries on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information about flow monitor entries on all cards. (In IRF mode.)

Examples

# (In standalone mode.) Display brief information about flow monitor entries.

<Sysname> display flow-monitor

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 3.

State: Fixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   2.2.2.2         3.3.3.3         6        Inbound   GE3/1/2      vpn1

 

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 3.

State: Unfixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   4.4.4.4         3.3.3.3         6        Inbound   GE3/1/2      vpn1

Table 1 Command output

Field	Description
State	State of the flow monitor table: ·         Fixed—The table has been frozen. ·         Unfixed—The table has not been frozen. This field is not displayed for illegitimate flow monitor entries.
Type	Flow type: ·         IP—IP flow. ·         MPLS—MPLS flow without IP options. ·         IP&MPLS—MPLS flows with IP options.
Source	Source IP address of the flow.
Destination	Destination IP address of the flow.
Protocol	IP protocol number of the flow.
Direction	Flow direction: ·         Inbound. ·         Outbound.
Interface	Interface that the flow passes through.
VPN	VPN to which the flow belongs. This field is empty if the flow does not belong to any VPN.
Labels	MPLS label list. The list supports a maximum of three labels.

 

# (In standalone mode.) Display detailed information about flow monitor entries.

<Sysname> display flow-monitor verbose

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 3

State: Fixed

Type Source          Destination     Protocol Direction Interface    VPN

Labels

-------------------------------------------------------------------------------

IP   2.2.2.2         3.3.3.3         6        Inbound   GE3/1/2      vpn1

Packets: 283457          

Bytes  : 5339980

Entry created time:   11/01/2014, 00:01:03

First packet arrived: 11/01/2014, 00:01:03

Last packet arrived:  11/01/2014, 00:02:59

 

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 3.

State: Unfixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   4.4.4.4         3.3.3.3         6        Inbound   GE3/1/2      vpn1

Packets: 283457          

Bytes  : 5339980

Entry created time:   11/01/2014, 10:03:03

First packet arrived: 11/01/2014, 10:03:03

Last packet arrived:  11/01/2014, 10:04:59

Table 2 Command output

Field	Description
Packets	Number of packets in the flow.
Bytes	Number of bytes in the flow.
Entry created time	Time when the flow monitor entry was created.
First packet arrived	Time when the first packet in the flow arrived. If no matching packet arrives, this field displays N/A.
Last packet arrived	Time when the last packet in the flow arrived. If no matching packet arrives, this field displays N/A.

 

flow-monitor

Use flow-monitor to enable flow monitor.

Use undo flow-monitor to disable flow monitor.

Syntax

flow-monitor { inbound | outbound }

undo flow-monitor { inbound | outbound }

Default

Flow monitor is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

inbound: Enables flow monitor for incoming traffic.

outbound: Enables flow monitor for incoming traffic.

Examples

# Enable flow monitor for incoming traffic.

<Sysname> system-view

[Sysname] flow-monitor inbound

flow-monitor add ip

Use flow-monitor add ip to add an IP flow monitor entry to the flow monitor table.

Syntax

In standalone mode:

flow-monitor add ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

In IRF mode:

flow-monitor add ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ chassis chassis-number slot slot-number ]

Default

No IP flow monitor entries exist.

Views

System view

Predefined user roles

network-admin

Parameters

ip: Specifies the IP flow monitor entry.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command adds the IP flow monitor entry to all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command adds the IP flow monitor entry to all cards. (In IRF mode.)

Usage guidelines

If you specify an existing illegitimate entry, the system adds the entry to the flow monitor table and deletes the entry from the illegitimate entry list.

Examples

# (In standalone mode.) Add an IP flow monitor entry to the specified slot.

<Sysname> system-view

[Sysname] flow-monitor add ip source 1.1.1.1 destination 2.2.2.2 protocol 6 interface gigabitethernet 3/1/1 inbound slot 3

Related commands

display flow-monitor

flow-monitor add mpls

Use flow-monitor add mpls to add an MPLS flow monitor entry to the flow monitor table.

Syntax

In standalone mode:

flow-monitor add mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

In IRF mode:

flow-monitor add mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ chassis chassis-number slot slot-number ]

Default

No MPLS flow monitor entries exist.

Views

System view

Predefined user roles

network-admin

Parameters

mpls: Specifies the MPLS flow monitor entry.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6. The value range for the label-value3 argument is 0 to 1048575.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command adds the MPLS flow monitor entry to all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command adds the MPLS flow monitor entry to all cards. (In IRF mode.)

Usage guidelines

If you specify an existing illegitimate entry, the system adds the entry to the flow monitor table and deletes the entry from the illegitimate entry list.

Examples

# (In standalone mode.) Add an MPLS flow monitor entry to the specified slot.

<Sysname> system-view

[Sysname] flow-monitor add mpls 1 20 2 23 3 12 source 1.1.1.1 destination 2.2.2.2 protocol 6 interface gigabitethernet 3/1/1 inbound slot 3

Related commands

display flow-monitor

flow-monitor delete ip

Use flow-monitor delete ip to delete an IP flow monitor entry.

Syntax

In standalone mode:

flow-monitor delete ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

In IRF mode:

flow-monitor delete ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ chassis chassis-number slot slot-number ]

Views

System view

Predefined user roles

network-admin

Parameters

ip: Specifies the IP flow monitor entry.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the IPv4 header, in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes the IP flow monitor entry from all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command deletes the IP flow monitor entry from all cards. (In IRF mode.)

Examples

# (In standalone mode.) Delete an IP flow monitor entry from the specified slot.

<Sysname> system-view

[Sysname] flow-monitor delete ip source 1.1.1.1 destination 2.2.2.2 protocol 6 interface gigabitethernet 3/1/1 inbound slot 3

Related commands

display flow-monitor

flow-monitor delete mpls

Use flow-monitor delete mpls to delete an MPLS flow monitor entry.

Syntax

In standalone mode:

flow-monitor delete mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

In IRF mode:

flow-monitor delete mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ chassis chassis-number slot slot-number ]

Views

System view

Predefined user roles

network-admin

Parameters

mpls: Specifies the MPLS flow monitor entry.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 6. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 6. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 6. The value range for the label-value3 argument is 0 to 1048575.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the IPv4 header, in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes the MPLS flow monitor entry from all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command deletes the MPLS flow monitor entry from all cards. (In IRF mode.)

Examples

# (In standalone mode.) Delete an MPLS flow monitor entry from the specified slot.

<Sysname> system-view

[Sysname] flow-monitor delete mpls 1 23 2 20 3 12 source 1.1.1.1 destination 2.2.2.2 protocol 6 interface gigabitethernet 3/1/1 inbound slot 3

Related commands

display flow-monitor

flow-monitor fixup

Use flow-monitor fixup to freeze the flow monitor table and set the table to fixed state.

Use undo flow-monitor fixup to set the flow monitor table to unfixed state and delete all illegitimate flow monitor entries.

Syntax

In standalone mode:

flow-monitor fixup [ slot slot-number ]

undo flow-monitor fixup [ slot slot-number ]

In IRF mode:

flow-monitor fixup [ chassis chassis-number slot slot-number ]

undo flow-monitor fixup [ chassis chassis-number slot slot-number ]

Default

The flow monitor table is in unfixed state.

Views

System view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command freezes the flow monitor tables on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command freezes the flow monitor tables on all cards. (In IRF mode.)

Examples

# (In standalone mode.) Freeze the flow monitor table in the specified slot.

<Sysname> system-view

[Sysname] flow-monitor fixup slot 3

Related commands

display flow-monitor

reset flow-monitor entry

Use reset flow-monitor entry to delete flow monitor entries.

Syntax

In standalone mode:

reset flow-monitor entry [ invalid ] [ ip | mpls ] [ interface interface-type interface-number ] [ slot slot-number ] [ source slot source-slot-number ]

In IRF mode:

reset flow-monitor entry [ invalid ] [ ip | mpls ] [ interface interface-type interface-number ] [ chassis chassis-number slot slot-number ] [ source chassis source-chassis-number slot source-slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

invalid: Specifies illegitimate flow monitor entries. If you do not specify this keyword, this command deletes fixed or unfixed flow monitor entries.

ip: Specifies IP flow monitor entries.

mpls: Specifies MPLS flow monitor entries.

interface interface-type interface-number: Specifies the interface that the traffic passes through. The interface-type interface-number arguments specify an interface by its type and number.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes flow monitor entries from all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command deletes flow monitor entries from all cards. (In IRF mode.)

source: Specifies the source card from which the traffic is mirrored. Specify this keyword to delete the flow monitor entries generated based on the mirrored traffic when the source card is removed.

slot source-slot-number: Specifies a card by its slot number. This command deletes flow monitor entries that are generated based on the traffic passing through the card. (In standalone mode.)

chassis source-chassis-number slot source-slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. This command deletes flow monitor entries that are generated based on the traffic passing through the card. (In IRF mode.)

Usage guidelines

The interface and source keywords are mutually exclusive. If you specify one of the two keywords, this command can delete flow monitor entries as follows:

·          Unfixed entries from an unfrozen flow monitor table.

·          Illegitimate and fixed entries from a frozen flow monitor table.

If you specify neither of the two keywords, this command can delete flow monitor entries as follows:

·          Unfixed entries from an unfrozen flow monitor table.

·          Illegitimate entries from a frozen flow monitor table.

Examples

# (In standalone mode.) Delete all illegitimate flow monitor entries from the specified slot.

<Sysname> reset flow-monitor entry invalid slot 3

Related commands

display flow-monitor

reset flow-monitor statistics

Use reset flow-monitor statistics to clear flow monitor statistics.

Syntax

In standalone mode:

reset flow-monitor statistics [ slot slot-number ]

In IRF mode:

reset flow-monitor statistics [ chassis chassis-number slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command clears flow monitor statistics on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears flow monitor statistics on all cards. (In IRF mode.)

Examples

# (In standalone mode.) Clear flow monitor statistics in the specified slot.

<Sysname> reset flow-monitor statistics slot 3

Related commands

display flow-monitor