Users Guide

Table Of Contents
Encoding : gpb
Transport : grpc TLS : disabled
Source Interface : ethernet1/1/1
Active : true
Reason : Connection summary: One or more active connections
The connection 10.11.56.204:40001 is in connected state
Verify telemetry in running configuration
OS10# show running-configuration telemetry
!
telemetry
enable
!
destination-group dest1
destination 10.11.56.204 40001
!
subscription-profile subscription-1
destination-group dest1
sensor-group bgp 300000
sensor-group bgp-peer 0
sensor-group buffer 15000
sensor-group device 300000
sensor-group environment 300000
sensor-group interface 180000
sensor-group lag 0
sensor-group system 300000
encoding gpb
transport grpc no-tls
source-interface ethernet1/1/1
Telemetry client authentication using TLS
To configure telemetry client authentication using TLS:
1. Set up a streaming telemetry collector.
2. Configure the host and CA certificate on the OS10 switch.
3. Configure telemetry (see Configure telemetry).
Set up a streaming telemetry collector
1. In the /etc/hosts file, add the collector hostname (for example, securesrc).
2. Perform the following steps to generate an RSA private key:
a. Generate a valid CA key and certificate.
openssl genrsa -passout pass:1234 -des3 -out ca.key 4096
openssl req -passin pass:1234 -new -x509 -days 365 -key ca.key -out ca.crt -subj
"/C=SP/ST=Spain/L=Valdepenias/O=Test/OU=Test/CN=Root CA"
b. Generate a valid server key and certificate request.
openssl genrsa -passout pass:1234 -des3 -out server.key 4096
openssl req -passin pass:1234 -new -key server.key -out server.csr -subj "/C=SP/
ST=Spain/L=Valdepenias/O=Test/OU=Server/CN=securesrc"
openssl x509 -req -passin pass:1234 -days 365 -in server.csr -CA ca.crt -CAkey
ca.key -set_serial 01 -out server.crt
c. Remove passphrase from the server key.
openssl rsa -passin pass:1234 -in server.key -out server.key
d. Generate a valid client key and certificate request.
openssl genrsa -passout pass:1234 -des3 -out client.key 4096
openssl req -passin pass:1234 -new -key client.key -out client.csr -subj "/C=SP/
1732
Telemetry