Configure IPFIX Profiles
Learn how to create or edit IPFIX profiles in Prisma SD-WAN.
An IPFIX profile is a global IPFIX configuration object which identifies collector configuration, filter configuration, the template for exporting flow information elements, and flow sampler configuration.
Create or edit an IPFIX profile to apply globally to all sites and devices using the following workflow.
- Select an IPFIX template.An IPFIX template specifies the information elements to export as part of the flow records.
- Selectand clickPoliciesStacked PoliciesIPFIXProfilesCreate Profile.
- Enter a name for the IPFIX Profile and(optional)description and tags.
- Select a template from theIPFIX Templatedrop-down, and clickNext.You can configure a maximum of 4 collectors per IPFIX profile.
- Configure collectors.Collectors define the third-party applications which consume the exported flow records.
- On theCollectortab, clickAddto configure a new collector.
- Protocol— Select the protocol.
- IPv4 Address/FQDN Schema—SelectIPv4 Addressto enter an IPv4 address of the collector in theHostfield or selectFQDN Schemato enter the domain name of the IPFIX collector in theHostfield.You can enter either an IPv4 address or an FQDN. Entering one of them is mandatory.
- (Optional)IPFIX Collector Context—Select a collector context from the drop-down.The device uses the IP address of the interface to which the collector context is bound as the source interface to export IPFIX flow records.If you do not bind a collector context to an interface, the device uses the controller port by default to establish the connection with the third-party collector. For platforms that do not have a controller port, it is mandatory to specify a collector context and bind it to an interface.
- Host Port—Enter a port number to match the port on which the collector is configured to receive IPFIX records.
- (Optional)Configure filters.Configure filters to select a subset of flows from all the observed flows to export to a collector. The criteria for filtering can be protocols, applications, source interface filter contexts, and source and destination port ranges. You can configure a maximum of 8 filters per IPFIX profile.
- On theFilterstab, clickAddto create a new filter.
- (Optional)Select a protocol from theProtocolsdrop-down.If you selectTCPorUDPas the protocol, you can associateSource Port RangesandDestination Port Rangeswith the protocols. If you do not select any protocol, the device allows all protocols.
- (Optional)Select an application from theApplicationsdrop-down to filter flow records for the selected applications.A blank value indicates that flow records from all applications are allowed.If you do not select any application, the device allows all applications.
- (Optional)Select aFilter Contextto map to an interface on the ION device.
- (Optional)SelectSource Port RangesandDestination Port Rangesif applicable for TCP and UDP protocols.The device evaluates the values in these fields only if the flows are TCP or UDP. The device ignores the values for all other protocols.
- (Optional)Enable sampling.Enable sampling to select a subset of flows to export from all the observed flows. The device forwards this subset to the filtering process to perform further selection if filters are configured.
- Enter a value forExport Cache Timeoutbetween 10 and 600 seconds.Export Cache Timeout specifies the time for which the ION device should cache a new flow record before exporting it. The default value is 30 seconds.
- (Optional)Select theEnable Samplingcheck box to choose a sampling algorithm.Disabling sampling exports IPFIX information for all flows.Select atime-basedalgorithm to configure the duration for sampling. If you select atime-basedAlgorithm, enter values in milliseconds forTime IntervalandTime Spacing.Time Intervalindicates the length of the sampling interval during which flows are selected. The default value is 5 ms.Time Spacingindicates the spacing between the end of one sampling interval and the start of the next sampling interval. The default value is 5 ms.The sampling rate is defined by Time Interval / (Time Interval + Time Spacing). The default values give a 50% sampling rate.
- Submitthe configured IPFIX profile.
Recommended For You
Recommended videos not found.