Avaya Inc.
– Proprietary & Confidential.
Use pursuant to the terms of your signed agreement or Avaya policy.
49
avaya.com
1.4.7.3
Verify the Medical Device traffic via the ERS8600 core switches using IPFIX
IPFIX can be enabled on the core switches to view and monitor the traffic coming in from the
edge ERS5520 switch. By using IPFIX, you can display various information such as source and
destination IP addresses, source and destination UDP/TCP port numbers, source and destination
MAC addresses, ingress and egress port numbers used on the ERS8600 switch, DSCP values,
and TCP flags. By using this information, we can simply verify that the UBP policy is working on
the ERS5520 switch by looking at the DSCP values. In addition, you can use IPFIX to look for
more specific traffic pattern to further enhance the UBP policy.
Use the following commands to configure and view the traffic flow assuming the port used on the
ERS8600 to connect to ERS5520-1 is port 3/29:
ERS8600-5:5#
config ip ipfix state enable
ERS8600-5:5#
config ip ipfix port 3/29 all-traffic enable
ERS8600-6:5#
show ip ipfix flows 3
================================================================================
IPFIX Flows
================================================================================
Slot Number : 3 Total Number Of Flows : 2
Port/ SrcIP/DstIP Src/ Protcol/ DSCP/ Egrss Start/Last
Vlan Addr Dst Obsv TcpFlag Port/ Time
Port Point Mgid
--------------------------------------------------------------------------------
3/29 192.168.20.30 63 udp
104
3/30 SEP 09 14:14:28
1500 192.168.20.40 63 Port none SEP 09 14:15:58
3/29 192.168.40.10 63 udp
64
3/30 SEP 09 14:14:28
1600 192.168.40.20 63 Port none SEP 09 14:15:58
Total number of Displayed Flows on Slot 3 : 2
--------------------------------------------------------------------------------
Port/ SrcMac/DstMac Byte/Pkt
Vlan Count
--------------------------------------------------------------------------------
3/29 00:09:5c:00:02:03 41880241880
1500 00:09:5c:00:02:04 615885910
3/29 00:18:65:00:02:01 4280620468
1600 00:18:65:00:02:02 62950301
Total number of Displayed Flows on Slot 3 : 2
Please note the DSCP values shown are the full ToS values. To calculate the actual
DSCP value, drop the two least significant binary bits. For this example, 104 in binary is
“1101000” and 64 in binary is “1000000” where if you drop the two least significant bits
become binary “11010” or decimal 26 and binary “10000” or decimal 16 respectively.
