R3204P16-HP Load Balancing Module System Maintenance Configuration Guide-6PW101

34
Configuring flow logging version
Configure the flow logging version according to the receiver capability. A receiver cannot resolve flow
logs correctly if it does not support the version of the flow logs.
Follow these steps to configure flow logging version:
To do … Use the command…
Remarks
Enter system view system-view —
Configure flow logging version
userlog flow export version
version-number
Optional
The default flow logging version is 1.0
NOTE:
A
lthou
g
h the LB module supports both of the two versions, only one can be active at one time. Therefore,
if you configure the flow logging version multiple times, the latest configuration will take effect.
Configuring the source address for flow logging packets
A source IP address is usually used to uniquely identify the sender of a packet. After the source IP address
is specified, when Device A sends flow logs to Device B, it uses the specified IP address instead of the
actual egress address as the source IP address of the packets. In this way, although Device A sends out
packets to Device B through different ports, Device B can judge whether the packets are sent from Device
A according to their source IP addresses. This function also simplifies the configurations of ACL and
security policy: If you specify the same source address as the source or destination address in the rule
command in ACL, the IP address variance and the influence of interface status can be masked, thus
filtering flow logging packets.
Follow these steps to configure the source address for flow logging packets:
To do… Use the command…
Remarks
Enter system view system-view —
Specify the source IP
address of flow logging
packets
userlog flow export source-ip
ip-address
Optional
By default, the source IP address of flow
logging packets is the IP address of the
egress interface of the packets.
Exporting flow logs
Flow logs can be exported in two ways:
• The device encapsulates flow logs into UDP packets and sends them to a log server of the network,
as shown in Figure 12.
The log server analyzes flow logs and displays them by class, thus realizing
remote monitoring.
• The device exports flow logs in the format of system information to the information center. You can
set the output destinations of the flow logs by setting the output destinations of the system
information. For more information about information center, see the chapter “Information center
configuration.”
NOTE:
The two export approaches of flow lo
g
s are mutually exclusive, and you can choose only one of them a
t
one time. If you configure two approaches simultaneously, the system will export the flow logs to the
information center automatically.