17-Network Management and Monitoring Configuration Guide

HomeSupportConfigure & DeployConfiguration GuidesH3C SecPath Firewall Series Configuration Guides(V7)-6W60117-Network Management and Monitoring Configuration Guide
04-NetStream configuration
Title Size Download
04-NetStream configuration 52.48 KB

Configuring session-based NetStream

About session-based NetStream

Session-based NetStream provides statistics for session-based services and exports the statistics in NetStream v9 format to NetStream servers.

For information about sessions, see session management in Security Configuration Guide.

Session-based NetStream aggregation modes

Session-based NetStream aggregates session statistics according to the aggregation criteria of an aggregation mode and exports the statistics to NetStream servers.

Table 1 lists the available aggregation modes. In each mode, the system merges statistics for multiple sessions if each aggregation criterion is of the same value.

Table 1 Session-based NetStream aggregation modes

Aggregation mode

Aggregation criteria

App aggregation

Application layer protocol ID.

App-profile aggregation

·     Application layer protocol ID.

·     Traffic rule ID.

App-user aggregation

·     Application layer protocol ID.

·     User IP address.

Session-based NetStream data export

Session-based NetStream uses an aging mechanism to export flow entry statistics to NetStream servers.

When the aging timer for a session-based NetStream entry expires, statistics about the entry is cleared from the cache and exported to the NetStream servers.

When the session-based NetStream cache is full, the device stops generating new flow entries. Statistics collection for existing flow entries is not affected.

A session-based NetStream entry is also exported in the following situations:

·     The session itself ages out.

·     The session is manually deleted by the administrator.

Restrictions and guidelines: Session-based NetStream configuration

For session-based NetStream to work, DPI must be enabled on the device. For more information about DPI, see DPI Configuration Guide.

Procedure

1.     Enter system view.

system-view

2.     Enable session-based NetStream.

session-based netstream enable

By default, session-based NetStream is disabled.

3.     Enable session-based NetStream aggregation modes.

session-based netstream aggregation { app | app-profile | app-user } *

By default, all session-based NetStream aggregation modes are disabled.

4.     Specify a destination host for session-based NetStream data export.

session-based netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

By default, no destination host is specified for session-based NetStream data export.

5.     (Optional.) Specify a source IP address for session-based NetStream packets.

session-based netstream export source ip ip-address

By default, the source IP address of session-based NetStream packets is the primary IP address of the output interface.

6.     (Optional.) Set the aging timer for cached session-based NetStream entries.

session-based netstream timeout minutes

By default, a session-based NetStream entry is can be cached for 5 minutes before being aged out.

Display and maintenance commands session-based NetStream

Execute display commands in any view.

 

Task

Command

Display session-based NetStream statistics in the cache.

display session-based netstream aggregation-cache { app | app-profile | app-user } *

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网