H3C Routers
NetStream Configuration Examples

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Contents

Introduction· 1

Prerequisites· 1

Example: Configuring IPv4 NetStream·· 1

Network configuration· 1

Software versions used· 2

Restrictions and guidelines· 2

Procedures· 2

Configuring the gateway· 2

Configuring IMC· 3

Verifying the configuration· 4

Configuration files· 5

Example: Configuring IPv6 NetStream·· 6

Network configuration· 6

Software versions used· 6

Restrictions and guidelines· 6

Procedures· 7

Configuring the gateway· 7

Configuring IMC· 7

Verifying the configuration· 9

Configuration files· 10

Related documentation· 10

 

Introduction

The following information provides examples for configuring IPv4 NetStream and IPv6 NetStream.

Prerequisites

This document is not restricted to specific software or hardware versions. Procedures and information in the examples might be slightly different depending on the software or hardware version of the device.

The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of NetStream.

Example: Configuring IPv4 NetStream

Network configuration

As shown in Figure 1, configure IPv4 NetStream on the gateway to monitor traffic and user behavior of internal users in the teaching areas.

Figure 1 Network diagram

‌

Software versions used

This configuration example was created and verified on R9141P16 of the MSR2630E-X1 device.

Restrictions and guidelines

·     You must specify the destination UDP port for NetStream data export as the UDP port number of the NetStream server.

·     In this configuration example, the NetStream server runs on IMC PLAT 7.0 (E0202).

Procedures

Configuring the gateway

# Enable NetStream for incoming and outgoing traffic on GigabitEthernet 0/0/1.

<Gateway> system-view

[Gateway] interface gigabitethernet 0/0/1

[Gateway-GigabitEthernet0/0/1] ip netstream inbound

[Gateway-GigabitEthernet0/0/1] ip netstream outbound

[Gateway-GigabitEthernet0/0/1] quit

# Specify GigabitEthernet 0/0/2 as the source interface for NetStream data packets.

[Gateway] interface gigabitethernet 0/0/2

[Gateway-GigabitEthernet0/0/2] ip address 10.1.1.1 255.255.255.0

[Gateway-GigabitEthernet0/0/2] quit

[Gateway] ip netstream export source interface gigabitethernet 0/0/2

# Specify 10.1.1.2 as the IP address of the destination host and UDP port 5000 as the export destination port number.

[Gateway] ip netstream export host 10.1.1.2 5000

Configuring IMC

Adding a device

1.     Log in to IMC.

2.     Click the Service tab.

3.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

4.     In the Guide to Quick Traffic Analysis And Audit Configuration area, click Device Management.

5.     Click Add.

Figure 2 Adding a device

Deploying the server configuration

1.     Click the Service tab.

2.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

3.     On the Settings page that opens, click Server Management.

4.     Click the Modify icon for the NTA/UBA server.

5.     On the Server Configuration page shown in Figure 3, configure the server parameters and then click Deploy.

Figure 3 Deploying the server configuration

Adding a traffic analysis task

You can add multiple types of traffic analysis tasks. This example uses the interface traffic analysis task type.

To add an interface traffic analysis task:

1.     Click the Service tab.

2.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

3.     On the Settings page that opens, click Traffic Analysis Task Management.

4.     Click Add. The Select Task Type page opens.

5.     Select Interface and click Next. The Add Traffic Analysis Task page opens.

6.     Configure basic information and interface information, and then click OK.

Figure 4 Adding a traffic analysis task

 

Verifying the configuration

1.     Display NetStream data export information.

[Gateway] display ip netstream export

IP export information:

  Flow source interface                           : GigabitEthernet0/0/2

  Flow destination VPN instance                   : Not specified

  Flow destination IP address (UDP)               : 10.1.1.2 (5000)

  Version 5 exported flow number                  : 8

  Version 5 exported UDP datagram number (failed) : 8 (0)

  Version 9 exported flow number                  : 0

  Version 9 exported UDP datagram number (failed) : 0 (0)

2.     Display the report of the interface traffic analysis task:

a.     Click the Service tab.

b.     From the left navigation pane, select Traffic Analysis and Audit > Interface Traffic Analysis Task. Use either of the following methods to access the report page of interface traffic analysis task Interface:

-     In the Summary List area, click the name of the interface traffic analysis task.

-     On the left navigation pane, move your mouse pointer to the shortcut menu icon next to Interface Traffic Analysis Task, and then select Interface from the menu.

Figure 5 Interface traffic analysis

 

Configuration files

#

interface GigabitEthernet0/0/2

 ip address 10.1.1.1 255.255.255.0

#

interface GigabitEthernet0/0/1

 ip netstream inbound

 ip netstream outbound

#

 ip netstream export host 10.1.1.2 5000

 ip netstream export source interface GigabitEthernet0/0/2

#

Example: Configuring IPv6 NetStream

Network configuration

As shown in Figure 6, configure IPv6 NetStream on the gateway to monitor the network access traffic and behavior of internal users.

Figure 6 Network diagram

‌

Software versions used

This configuration example was created and verified on R9141P16 of the MSR2630E-X1 device.

Restrictions and guidelines

·     You must specify the destination UDP port for NetStream data export as the UDP port number of the NetStream server.

·     In this configuration example, the NetStream server runs on IMC PLAT 7.0 (E0202).

Procedures

Configuring the gateway

# Assign IP address 22.1.1.2/24 to the NetStream server, and make sure the NetStream server and the gateway can reach each other. (Details not shown.)

# Enable IPv6 NetStream for incoming and outgoing traffic on GigabitEthernet 0/0/1.

<Gateway> system-view

[Gateway] interface GigabitEthernet 0/0/1

[Gateway-GigabitEthernet0/0/1] ipv6 netstream inbound

[Gateway-GigabitEthernet0/0/1] ipv6 netstream outbound

[Gateway-GigabitEthernet0/0/1] quit

# Configure an IP address for GigabitEthernet 0/0/2.

[Gateway] interface gigabitethernet 0/0/2

[Gateway-GigabitEthernet0/0/2] ip address 20.1.1.1 255.255.255.0

[Gateway-GigabitEthernet0/0/2] quit

# Specify GigabitEthernet 0/0/2 as the source interface for IPv6 NetStream aggregation data packets.

[Gateway] ipv6 netstream export source interface GigabitEthernet 0/0/2

# Specify 22.1.1.2 as the IP address of the destination host and UDP port 5000 as the export destination port number.

[Gateway] ipv6 netstream export host 22.1.1.2 5000

Configuring IMC

Adding a device

1.     Log in to IMC.

2.     Click the Service tab.

3.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

4.     In the Guide to Quick Traffic Analysis And Audit Configuration area, click Device Management.

5.     Click Add.

Figure 7 Adding a device

Deploying the server configuration

1.     Click the Service tab.

2.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

3.     On the Settings page that opens, click Server Management.

4.     Click the Modify icon for the NTA/UBA server.

5.     On the Server Configuration page shown in Figure 8, configure the server parameters and then click Deploy.

Figure 8 Deploying the server configuration

Adding a traffic analysis task

You can add multiple types of traffic analysis tasks. This example uses the interface traffic analysis task type.

To add an interface traffic analysis task:

1.     Click the Service tab.

2.     From the left navigation pane, select Traffic Analysis and Audit > Settings.

3.     On the Settings page that opens, click Traffic Analysis Task Management.

4.     Click Add. The Select Task Type page opens.

5.     Select Interface and click Next. The Add Traffic Analysis Task page opens.

6.     Configure basic information and interface information, and then click OK.

Figure 9 Adding a traffic analysis task

 

Verifying the configuration

1.     Display IPv6 NetStream data export information.

[Gateway] display ipv6 netstream export

IPv6 export information:

  Flow source interface                           : GigabitEthernet0/0/2

  Flow destination VPN instance                   : Not specified

  Flow destination IP address (UDP)               : 22.1.1.2 (5000)

  Version 9 exported flow number                  : 0

  Version 9 exported UDP datagram number (failed) : 0 (0)

2.     Display the report of the interface traffic analysis task:

a.     Click the Service tab.

b.     From the left navigation pane, select Traffic Analysis and Audit > Interface Traffic Analysis Task. Use either of the following methods to access the report page of interface traffic analysis task Interface:

-     In the Summary List area, click the name of the interface traffic analysis task.

-     On the left navigation pane, move your mouse pointer to the shortcut menu icon next to Interface Traffic Analysis Task, and then select Interface from the menu.

Figure 10 Interface traffic analysis

 

Configuration files

#

interface GigabitEthernet0/0/2

 ip address 20.1.1.1 255.255.255.0

#

interface GigabitEthernet0/0/1

 ipv6 netstream inbound

 ipv6 netstream outbound

#

 ipv6 netstream export host 22.1.1.2 5000

 ipv6 netstream export source interface GigabitEthernet0/0/2

Related documentation

·     Network Management and Monitoring Configuration Guide in H3C MSR1000[2600][3600] Routers Configuration Guides(V9)

·     Network Management and Monitoring Command Reference in H3C MSR1000[2600][3600] Routers Command References(V9)