Contents

Flow monitor commands· 1

display flow-monitor 1

flow-monitor 3

flow-monitor add ip· 4

flow-monitor add mpls· 5

flow-monitor delete ip· 6

flow-monitor delete mpls· 7

flow-monitor fixup· 8

reset flow-monitor entry· 8

reset flow-monitor statistics· 9

 

Flow monitor commands

display flow-monitor

Use display flow-monitor to display information about flow monitor entries.

Syntax

display flow-monitor [ invalid ] [ verbose ] [ { ip | mpls [ label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] ] } ] [ destination destination-address | interface interface-type interface-number | source source-address ] * [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

invalid: Specifies illegitimate flow monitor entries. If you do not specify this keyword, this command displays information about legitimate flow monitor entries.

verbose: Displays detailed information about flow monitor entries. If you do not specify this keyword, this command displays brief information about flow monitor entries.

ip: Specifies IP flow monitor entries.

mpls: Specifies MPLS flow monitor entries.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 10. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 10. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 10. The value range for the label-value3 argument is 0 to 1048575.

destination destination-ip: Specifies a destination IP address in dotted-decimal notation.

interface interface-type interface-number: Specifies an interface by its type and number.

source source-ip: Specifies a source IP address in dotted-decimal notation.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays information about flow monitor entries on all cards.

Examples

# Display brief information about flow monitor entries.

<Sysname> display flow-monitor

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 1.

State: Fixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   2.2.2.2         3.3.3.3         6        Inbound   XGE3/0/2     vpn1

 

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 2.

State: Unfixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   4.4.4.4         3.3.3.3         6        Inbound   XGE3/0/2     vpn1

Table 1 Command output

Field	Description
Total X matching IP flow monitor entries and Y matching MPLS flow monitor entries on slot 1.	Total number of IP flow monitor entries and and MPLS flow monitor entries in slot 1.
State	State of the flow monitor table: ·     Fixed—The table has been frozen. ·     Unfixed—The table has not been frozen. This field is not displayed for illegitimate flow monitor entries.
Type	Flow type: ·     IP—IP flow. ·     MPLS—MPLS flow without IP options. ·     IP&MPLS—MPLS flows with IP options.
Source	Source IP address of the flow.
Destination	Destination IP address of the flow.
Protocol	IP protocol number of the flow.
Direction	Flow direction: ·     Inbound. ·     Outbound.
Interface	Interface that the flow passes through.
VPN	VPN to which the flow belongs. This field is empty if the flow does not belong to any VPN.
Labels	MPLS label list. The list supports a maximum of three labels.

‌

# Display detailed information about flow monitor entries.

<Sysname> display flow-monitor verbose

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 1

State: Fixed

Type Source          Destination     Protocol Direction Interface    VPN

Labels

-------------------------------------------------------------------------------

IP   2.2.2.2         3.3.3.3         6        Inbound   XGE3/0/2     vpn1

Packets: 283457          

Bytes  : 5339980

Entry created time:   11/01/2014, 00:01:03

First packet arrived: 11/01/2014, 00:01:03

Last packet arrived:  11/01/2014, 00:02:59

 

Total 1 matching IP flow monitor entries and 0 matching MPLS flow monitor entries on slot 2.

State: Unfixed

Type Source          Destination     Protocol Direction Interface    VPN

     Labels

-------------------------------------------------------------------------------

IP   4.4.4.4         3.3.3.3         6        Inbound   XGE3/0/2     vpn1

Packets: 283457          

Bytes  : 5339980

Entry created time:   11/01/2014, 10:03:03

First packet arrived: 11/01/2014, 10:03:03

Last packet arrived:  11/01/2014, 10:04:59

Table 2 Command output

Field	Description
Packets	Number of packets in the flow.
Bytes	Number of bytes in the flow.
Entry created time	Time when the flow monitor entry was created.
First packet arrived	Time when the first packet in the flow arrived. If no matching packet arrives, this field displays N/A.
Last packet arrived	Time when the last packet in the flow arrived. If no matching packet arrives, this field displays N/A.

 

flow-monitor

Use flow-monitor to enable flow monitor.

Use undo flow-monitor to disable flow monitor.

Syntax

flow-monitor { inbound | outbound }

undo flow-monitor { inbound | outbound }

Default

Flow monitor is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

inbound: Enables flow monitor for incoming traffic.

outbound: Enables flow monitor for incoming traffic.

Examples

# Enable flow monitor for incoming traffic.

<Sysname> system-view

[Sysname] flow-monitor inbound

flow-monitor add ip

Use flow-monitor add ip to add an IP flow monitor entry to the flow monitor table.

Syntax

flow-monitor add ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

Default

No IP flow monitor entries exist.

Views

System view

Predefined user roles

network-admin

Parameters

ip: Specifies the IP flow monitor entry.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command adds the IP flow monitor entry to all cards.

Usage guidelines

If you specify an existing illegitimate entry, the system adds the entry to the flow monitor table and deletes the entry from the illegitimate entry list.

Examples

# Add an IP flow monitor entry to the specified slot.

<Sysname> system-view

[Sysname] flow-monitor add ip source 1.1.1.1 destination 2.2.2.2 protocol 6 interface ten-gigabitethernet 3/0/1 inbound slot 1

Related commands

display flow-monitor

flow-monitor add mpls

Use flow-monitor add mpls to add an MPLS flow monitor entry to the flow monitor table.

Syntax

flow-monitor add mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

Default

No MPLS flow monitor entries exist.

Views

System view

Predefined user roles

network-admin

Parameters

mpls: Specifies the MPLS flow monitor entry.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 10. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 10. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 10. The value range for the label-value3 argument is 0 to 1048575.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command adds the MPLS flow monitor entry to all cards.

Usage guidelines

If you specify an existing illegitimate entry, the system adds the entry to the flow monitor table and deletes the entry from the illegitimate entry list.

Examples

# Add an MPLS flow monitor entry to the specified slot.

<Sysname> system-view

[Sysname] flow-monitor add mpls 1 20 2 23 3 12 source 1.1.1.1 destination 2.2.2.2 protocol 6 interface ten-gigabitethernet 3/0/1 inbound slot 1

Related commands

display flow-monitor

flow-monitor delete ip

Use flow-monitor delete ip to delete an IP flow monitor entry.

Syntax

flow-monitor delete ip source source-address destination dest-address protocol protocol-number interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

Views

System view

Predefined user roles

network-admin

Parameters

ip: Specifies the IP flow monitor entry.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the IPv4 header, in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes the IP flow monitor entry from all cards.

Examples

# Delete an IP flow monitor entry from the specified slot.

<Sysname> system-view

[Sysname] flow-monitor delete ip source 1.1.1.1 destination 2.2.2.2 protocol 6 interface ten-gigabitethernet 3/0/1 inbound slot 1

Related commands

display flow-monitor

flow-monitor delete mpls

Use flow-monitor delete mpls to delete an MPLS flow monitor entry.

Syntax

flow-monitor delete mpls label-position1 label-value1 [ label-position2 label-value2 [ label-position3 label-value3 ] ] [ source source-address destination dest-address protocol protocol-number ] interface interface-type interface-number { inbound | outbound } [ vpn-instance vpn-instance-name ] [ slot slot-number ]

Views

System view

Predefined user roles

network-admin

Parameters

mpls: Specifies the MPLS flow monitor entry.

label-position1 label-value1: Specifies a label by its position and value. The value range for the label-position1 argument is 1 to 10. The value range for the label-value1 argument is 0 to 1048575.

label-position2 label-value2: Specifies a label by its position and value. The value range for the label-position2 argument is 1 to 10. The value range for the label-value2 argument is 0 to 1048575.

label-position3 label-value3: Specifies a label by its position and value. The value range for the label-position3 argument is 1 to 10. The value range for the label-value3 argument is 0 to 1048575.

source source-address: Specifies the source IP address in dotted-decimal notation.

destination dest-address: Specifies the destination IP address in dotted-decimal notation.

protocol protocol-number: Specifies the protocol number in the IPv4 header, in the range of 0 to 255. Common protocols include ICMP (1), IGMP (2), TCP (6), and UDP (17).

interface interface-type interface-number: Specifies the interface that the flow passes through. The interface-type interface-number arguments specify an interface by its type and number.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the flow belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the flow is on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes the MPLS flow monitor entry from all cards.

Examples

# Delete an MPLS flow monitor entry from the specified slot.

<Sysname> system-view

[Sysname] flow-monitor delete mpls 1 23 2 20 3 12 source 1.1.1.1 destination 2.2.2.2 protocol 6 interface ten-gigabitethernet 3/0/1 inbound slot 1

Related commands

display flow-monitor

flow-monitor fixup

Use flow-monitor fixup to freeze the flow monitor table and set the table to fixed state.

Use undo flow-monitor fixup to set the flow monitor table to unfixed state and delete all illegitimate flow monitor entries.

Syntax

flow-monitor fixup [ slot slot-number ]

undo flow-monitor fixup [ slot slot-number ]

Default

The flow monitor table is in unfixed state.

Views

System view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command freezes the flow monitor tables on all cards.

Examples

# Freeze the flow monitor table in the specified slot.

<Sysname> system-view

[Sysname] flow-monitor fixup slot 1

Related commands

display flow-monitor

reset flow-monitor entry

Use reset flow-monitor entry to delete flow monitor entries.

Syntax

reset flow-monitor entry [ invalid ] [ ip | mpls ] [ interface interface-type interface-number ] [ slot slot-number ] [ source slot source-slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

invalid: Specifies illegitimate flow monitor entries. If you do not specify this keyword, this command deletes fixed or unfixed flow monitor entries.

ip: Specifies IP flow monitor entries.

mpls: Specifies MPLS flow monitor entries.

interface interface-type interface-number: Specifies the interface that the traffic passes through. The interface-type interface-number arguments specify an interface by its type and number.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command deletes flow monitor entries from all cards.

source: Specifies the source card from which the traffic is mirrored. Specify this keyword to delete the flow monitor entries generated based on the mirrored traffic when the source card is removed.

slot source-slot-number: Specifies a card by its slot number. This command deletes flow monitor entries that are generated based on the traffic passing through the card.

Usage guidelines

The interface and source keywords are mutually exclusive. If you specify one of the two keywords, this command can delete flow monitor entries as follows:

·     Unfixed entries from an unfrozen flow monitor table.

·     Illegitimate and fixed entries from a frozen flow monitor table.

If you specify neither of the two keywords, this command can delete flow monitor entries as follows:

·     Unfixed entries from an unfrozen flow monitor table.

·     Illegitimate entries from a frozen flow monitor table.

Examples

# Delete all illegitimate flow monitor entries from the specified slot.

<Sysname> reset flow-monitor entry invalid slot 1

Related commands

display flow-monitor

reset flow-monitor statistics

Use reset flow-monitor statistics to clear flow monitor statistics.

Syntax

reset flow-monitor statistics [ slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command clears flow monitor statistics on all cards.

Examples

# Clear flow monitor statistics in the specified slot.

<Sysname> reset flow-monitor statistics slot 1

Related commands

display flow-monitor