CAUTION
On a network where the 32-bit AS field mode is used, the NMS needs to identify the 32-
bit AS field. Otherwise, the NMS will fail to identify inter-AS traffic sent from devices.
l
Interface index
: The NMS uses the interface index carried in the NetStream packet output
from the NDE to query information about the interface from which the packet is output.
The interface index can be of 16 bits or 32 bits, which is determined by NMS devices of
different vendors. Therefore, the NDE needs to use a proper interface index type according
to the index parsing capability of the NMS. For example, if the NMS can parse a 32-bit
interface index, the interface index carried in the NetStream packet must be a 32-bit value.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
ip netstream as-mode
{
16
|
32
}
The AS field mode is configured on the router.
By default, the AS field mode on the router is 16 bits.
Step 3
Run:
ip netstream export index-switch
{
16
|
32
}
The type of the interface index carried in the NetStream packet output from the router is
configured.
By default, the interface index carried in the NetStream packet output from the router is of 16
bits. Before converting an interface index from 16 bits to 32 bits, ensure that the following
conditions are met:
l
Original flows are output in V9 format.
l
The NetStream packet format for all aggregated flows is V9.
----End
6.3.4 (Optional) Enabling Statistics Collection of TCP Flags
There are six flag bits (URG, ACK, PSH, RST, SYN, and FIN) in a TCP packet header. The
flag bits, together with the destination IP address, source IP address, destination port number,
and source port number of a TCP packet, identify the function and status of the TCP packet on
a TCP connection. By enabling statistics collection of TCP flags, you can extract the TCP-flag
information from network packets and send it to the NMS. The NMS checks the traffic volume
of each flag and determines whether the network is attacked by TCP packets.
Procedure
Step 1
Run:
system-view
HUAWEI NetEngine5000E Core Router
Configuration Guide - System Management
6 NetStream Configuration
Issue 01 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
134
