Zviri mukati
hide
ADVANTECH Router App Net Flow Pfix
Product Information
Zvinotsanangurwa
- Mugadziri: Advantech Czech sro
- Kero: Sokolska 71, 562 04 Usti nad Orlici, Czech Republic
- Gwaro Nhamba.: APP-0085-EN
- Kudzokorora Zuva: Gumiguru 19, 2023
Tsanangudzo yeModule
- Iyo NetFlow/IPIX module ndeye router app yakagadziriswa neAdvantech Czech s.r.o. Iyo haina kubatanidzwa mune yakajairwa router firmware uye inoda kurodha zvakasiyana.
- Iyo module yakagadzirirwa kutarisa network traffic. Inoshanda nekuunganidza IP traffic ruzivo uchishandisa probe yakaiswa paNetFlow-inogonesa ma routers.
- Ruzivo urwu rwunobva rwaendeswa kune NetFlow muunganidzi uye analyzer kuti iwedzere kuongororwa.
Web Interface
Kana iyo module yaiswa, unogona kuwana yayo web interface nekudzvanya pane zita remodule pane Router maapplication peji reiyo router yako web interface. The web interface ine menyu ine zvikamu zvakasiyana:
Configuration
Chikamu cheKugadziridza chinokutendera kuti ugadzirise akasiyana marongero eNetFlow/IPFIX router app. Kuti uwane zvigadziriso, tinya pane "Global" chinhu mumenu huru yemodule's web interface. Zvinhu zvinogadziriswa zvinosanganisira:
- Bvumira Probe: Iyi sarudzo inotanga kuendesa iyo NetFlow ruzivo kumuunganidzi ari kure (kana akatsanangurwa) kana kumuunganidzi wenzvimbo (kana akagoneswa).
- Protocol: Iyi sarudzo inokutendera iwe kuti usarudze iyo protocol inoshandiswa kune NetFlow ruzivo rwekutumira. Unogona kusarudza kubva kuNetFlow v5, NetFlow v9, kana IPFIX (NetFlow v10).
- Injini ID: Iyi sarudzo inobvumidza iwe kuseta iyo Observation Domain ID (yeIPFIX), Source ID (yeNetFlow v9), kana Injini ID (yeNetFlow v5). Izvi zvinobatsira muunganidzi kusiyanisa pakati pevazhinji vatengesi kunze kwenyika. Kuti uwane rumwe ruzivo, tarisa kune chikamu cheInjini ID Kupindirana.
Information
Chikamu cheRuzivo chinopa ruzivo nezve module uye marezinesi ayo. Iwe unogona kuwana chikamu ichi nekudzvanya pane "Ruzivo" chinhu mumenyu huru yemodule web interface.
Kushandisa Mirayiridzo
Ruzivo Rwakaunganidzwa
- Iyo NetFlow / IPFIX module inounganidza IP traffic traffic kubva kune router's probe. Izvi zvinosanganisira ruzivo senge kwabva uye kwekuenda IP kero, kuverenga kwepacket, ma byte kuverenga, uye ruzivo rweprotocol.
Kudzorerwa Kwemashoko Akachengetwa
- Kuti utorezve ruzivo rwakachengetwa, unofanirwa kuwana iyo NetFlow muunganidzi uye analyzer uko iyo module inoendesa iyo data. Muunganidzi uye analyzer achapa maturusi nemishumo yekuongorora nekuona ruzivo rwakaunganidzwa.
Injini ID Kudyidzana
- Iyo Injini ID yekumisikidza inokubvumira kuti utaure yakasarudzika identifier kune wako kunze. Izvi zvinobatsira kana uine vakawanda vatengesi vanotumira data kumuunganidzi mumwe chete.
- Nekuisa akasiyana Injini ID, muunganidzi anogona kusiyanisa pakati peiyo data yakagamuchirwa kubva kune vakasiyana vatengesi.
Traffic Timeouts
- Iyo module haipe chaiyo ruzivo nezve traffic nguva yekubuda. Ndokumbira utarise kune magwaro ane hukama kana kubata Advantech Czech s.r.o. kuti uwane mamwe mashoko.
Related Documents
- Kuti uwane rumwe ruzivo uye yakadzama mirairo, ndapota tarisa kune anotevera magwaro:
- Configuration Manual
- Mamwe magwaro ane hukama akapihwa neAdvantech Czech s.r.o.
FAQ
Mubvunzo: Ndiani mugadziri weNetFlow/IPFIX?
- A: Mugadziri weNetFlow/IPIX ndiye Advantech Czech s.r.o.
Mubvunzo: Chii chinangwa cheNetFlow/IPFIX?
- A: NetFlow/IPIXI yakagadzirirwa kutarisa network traffic nekuunganidza IP traffic information kubva kuNetFlow-enabled routers uye kuiendesa kune NetFlow muunganidzi uye analyzer.
Mubvunzo: Ndingawana sei zvigadziriso zvemodule?
- A: Kuti uwane marongero ekugadzirisa, tinya pane "Global" chinhu mumenyu huru yemodule web interface.
Mubvunzo: Chii chinonzi Injini ID kuseta inoshandiswa?
- A: Iyo Injini ID yekumisikidza inokutendera kuti utaure yakasarudzika identifier kune yako kunze, ichibatsira muunganidzi kusiyanisa pakati pevazhinji vanotumira kunze.
- © 2023 Advantech Czech sro Hapana chikamu chebhuku rino chinogona kutsikiswa kana kufambiswa nenzira ipi zvayo, zvemagetsi kana zvemuchina, kusanganisira kutora mafoto, kurekodha, kana kuchengetwa kweruzivo nehurongwa hwekutora pasina mvumo yakanyorwa.
- Mashoko ari mubhuku rino anogona kuchinja pasina chiziviso, uye haamiriri kuzvipira kune chikamu cheAdvantech.
- Advantech Czech sro haizove nemhosva yekukuvadza kana kukonzeresa kunokonzerwa nekupa, kuita, kana kushandiswa kwebhuku rino.
- Mazita ese emhando anoshandiswa mubhuku rino ndiwo maregisheni akanyoreswa evaridzi vawo. Kushandiswa kwezviratidzo kana mamwe mazita ari mubhuku rino ndeechinangwa chete uye hakuunze tsinhiro neane chiratidzo.
Zviratidzo zvakashandiswa
Danger -Ruzivo nezve chengetedzo yemushandisi kana kukuvara kungangoitika kune router.
Attention - Matambudziko anogona kumuka mune chaiwo mamiriro.
Information -Mazano anobatsira kana ruzivo rwekufarira kwakakosha.
Example – Eksample yebasa, kuraira kana script.
Changelog
NetFlow/IPIX Changelog
- v1.0.0 (2020-04-15)
- Kutanga kusunungurwa.
- v1.1.0 (2020-10-01)
- Yakagadziridzwa CSS uye HTML kodhi kuti ienderane ne firmware 6.2.0+.
Tsanangudzo yemodule
- Router app NetFlow/IPFIX haimo mune yakajairwa router firmware. Kukwidzwa kweiyi router app kunotsanangurwa muBhuku Rekugadzirisa (ona Chitsauko Chinoenderana Zvinyorwa).
- Router app NetFlow/IPIXI inotemerwa yekutarisa network traffic. NetFlow inogonesa ma routers ane probe inounganidza IP traffic traffic uye inoaendesa kune NetFlow muunganidzi uye analyzer.
Iyi router app ine:
- NetFlow probe iyo inogona kuendesa ruzivo kune inoenderana Network muunganidzi uye analyzer, semuenzaniso httsp://www.paessler.com/prtg.
- NetFlow muunganidzi anochengeta iyo yakaunganidzwa ruzivo kune a file. Inogona zvakare kugamuchira uye kuchengeta NetFlow traffic kubva kune mamwe maturusi.
Web Interface
- Kana kuiswa kwe module kwapera, iyo module GUI inogona kukumbirwa nekudzvanya zita remodule pane Router apps peji re router's. web interface.
- Chikamu chekuruboshwe cheiyi GUI chine menyu ine Configuration menyu chikamu uye Ruzivo menyu chikamu.
- Customization menyu chikamu chine chete Return chinhu, icho chinochinja kubva kumodule's web peji kune router web mapeji ekugadzirisa. Iyo huru menyu yemodule's GUI inoratidzwa paMufananidzo 2.
Configuration
Global
- Yese NetFlow/IPFIX router app marongero anogona kugadzirwa nekudzvanya pane Global chinhu mune main menu yemodule. web interface. An overview yezvinhu zvinogadziriswa zvinopihwa pazasi.
| Item | Tsanangudzo |
| Gonesa Probe | Tanga kuendesa ruzivo rweNetFlow kune Remote Collector (kana yatsanangurwa), kana kune Yemunharaunda Collector (kana yagoneswa). |
| Protocol | Protocol inofanira kushandiswa: NetFlow v5, Netflow v9, IPFIX (Net- Flow v10) |
| Injini ID | Observation Domain ID (paIPFIX, Source Id paNetFlow v9, kana Injini Id paNetFlow v5) kukosha. Izvi zvinogona kubatsira muunganidzi wako kusiyanisa pakati pevazhinji vanotengesa kunze. Onawo chikamu cheInjini ID Interoperability. |
| Item | Tsanangudzo |
| Sampler | (zvisina chinhu): tumira kuyerera kwese kunoonekwa; deterministic: tumira imwe neimwe N-th yakacherechedzwa kuyerera; random: sarudza zvisingaite imwe kubva muN inoyerera; hash: sarudza hash-randomly imwe kubva muN inoyerera. |
| Sampleer Rate | Kukosha kweN. |
| Inactive Traffic Timeout | Tumira kuyerera mushure mekusashanda kwemasekonzi gumi nemashanu. Default value i15. |
| Active Traffic Timeout | Tumira kuyerera mushure mekushanda kwemasekonzi 1800 (maminetsi makumi matatu). Default value i30. Onawo chikamu chekufamba kwetraffic. |
| Remote Collector | IP kero yeNetFlow muunganidzi kana analyzer, kwainoendesa iyo yakaunganidzwa yeNetFlow traffic traffic. Port is Op- tion, default 2055. Detination inogona kuve necomma yakapatsanurwa runyoro rwema IP kero akawanda (nezviteshi) kuratidza NetFlow kune vaviri kana kupfuura vateresi/analyzer. |
| Gonesa Muunganidzi Wenzvimbo | Tanga kugamuchira ruzivo rweNetFlow kubva kuProbe yemuno (kana yagoneswa) kana kubva kure kure probe. |
| Nguva Yekuchengeta | Inotsanangura nguva yekutenderera mumasekonzi files. Iyo yakasarudzika kukosha ndeye 300s (5min). |
| Kupera Kwekuchengetedza | Inoisa iyo max hupenyu nguva ye files mudhairekitori. Ukoshi hwe0 hunodzima huwandu hwehupenyu hwese. |
| Chengetedza Interface SNMP Nhamba | Tarisa kuchengetedza SNMP indekisi yeiyo yekupinza / yekubuda interface (% mukati, % kunze) mukuwedzera kune yakajairwa seti yeruzivo, ona pazasi. |
| Chengetedza Inotevera Hop IP Kero | Tarisa kuchengetedza IP kero yeinotevera hop yekubuda traffic (%nh). |
| Chengetedza Kutumira IP Kero | Tarisa kuchengetedza IP kero yeiyo inotumira router (% ra). |
| Chengetedza Exporting Injini ID | Tarisa kuchengetedza Injini ID yeiyo inotumira router (% eng). |
| Chengetedza Kuyerera Kwekugamuchira Nguva | Tarisa kuchengetedza nguvaamp pakagamuchirwa ruzivo rwekuyerera (%tr). |
Tafura 1: Kugadzirisa zvinhu tsananguro
Information
marezinesi Inopfupikisa Open-Source Software (OSS) marezinesi anoshandiswa neiyi module
Kushandisa Mirayiridzo
Iyo data yeNetFlow haifanirwe kutumirwa pamusoro peWAN, kunze kwekunge VPN yashandiswa. Iyo data haina kuvharirwa kana kuvharwa, saka munhu asina kubvumidzwa anogona kubata uye view ruzivo.
Ruzivo Rwakaunganidzwa
Iyo inotevera seti yeruzivo inogara ichitumirwa neprobe uye inochengetwa nemuunganidzi:
- Nguvaamp apo traffic yakatanga kuonekwa (%ts) uye yakapedzisira kuonekwa (%te), uchishandisa wachi yeprobe
- Nhamba yemabhaiti (%byt) uye mapaketi (%pkt)
- Protocol inoshandiswa (% pr)
- TOS (%tos)
- TCP mireza (% flg)
- Kwakabva IP kero (%sa, %sap) uye port (%sp)
- Nzvimbo yeIP kero (%da, %dap) uye port (%dp)
- ICMP mhando (%it)
Izvi zvinotevera zvinotumirwawo, asi zvinochengetwa chete pakukumbira (ona config pamusoro):
- SNMP indekisi yeiyo yekupinza / yekubuda interface (% mukati,% kunze)
- IP kero yeinotevera hop yekubuda traffic (%nh)
- IP kero (%ra) uye Injini ID (%eng) yenzira yekutumira kunze (probe)
- Nguvaamp pakagamuchirwa ruzivo rwekuyerera (%tr), uchishandisa wachi yemuunganidzi
- Kukosha kuri mumabhuraketi (% xx) kunoratidza fomati ichashandiswa nenfdump kuratidza kukosha uku (ona chitsauko chinotevera).
Kudzorerwa Kwemashoko Akachengetwa
- Data inochengetwa mukati /tmp/netflow/nfcapd.yyyymmddHHMM, uko yyyymmddHHMM ndiyo nguva yekusika. Dhairekitori rinosanganisirawo .nfstat file, iyo inoshandiswa kutarisa nguva yekupera.
- Usachinja izvi file. Kugadzirisa kupera shandisa admin GUI.
- The files inogona kuverengwa uchishandisa iyo nfdump command. nfdump [sarudzo] [sefa]
Ratidza UDP mapaketi akatumirwa ne192.168.88.100:
- nfdump -r nfcapd.202006011625 'proto udp and src ip 192.168.88.100'
- Ratidza mafambiro ese ari pakati pe16:25 ne17:25, kubatanidza mafambiro emativi maviri (-B):
- nfdump -R /tmp/netflow/nfcapd.202006011625:nfcapd.202006011725 -B
- Ratidza Engine Type/ID, kwakabva kero + chiteshi uye kero yekuenda + por kune ese anoyerera:
- nfdump -r /tmp/netflow/nfcapd.202006011625 -o “fmt:%eng %sap %dap”
Injini ID Kudyidzana
- Netflow v5 inotsanangura maviri 8-bit identifiers: Injini Type uye Injini ID. Probe paAdvantech routers inotumira chete Engine ID (0..255). Iyo Injini Type ichagara iri zero (0). Nekudaro, kuyerera kunotumirwa neInjini ID = 513 (0x201) ichagamuchirwa seInjini Type/ID = 0/1.
- Netflow v9 inotsanangura imwe 32-bit identifier. Probe paAdvantech routers inogona kutumira chero 32-bit nhamba, sei-sevamwe vagadziri (semuenzaniso Cisco) patsanura identifier kuita maviri akachengetwa mabyte, achiteverwa neInjini Type uye Injini ID. Mugamuchiri anotevera nzira imwe cheteyo.
- Nekudaro, kuyerera kunotumirwa neInjini ID = 513 (0x201) ichagamuchirwa seInjini Type/ID = 2/1.
- IPFIX inotsanangura imwe 32-bit identifier. Probe paAdvantech routers inogona kutumira chero 32-bit nhamba, asi muunganidzi wemunharaunda haachengete kukosha uku. Saka chero kuyerera kuchagamuchirwa seInjini Type/ID = 0/0.
- Kurudziro: Kana iwe uchida kuchengeta Injini ID muunganidzi wenzvimbo, tarisa Chitoro Inoburitsa Injini ID mukumisikidzwa, shandisa Injini ID <256 uye dzivirira kushandisa IPFIX protocol.
- Traffic Timeouts
- Iyo probe inoburitsa yose inoyerera, i.e. ese mapaketi ari pamwechete. Kana pasina mapaketi anocherechedzwa kwenguva yakapihwa (Inactive Traffic Timeout), kuyerera kunoonekwa sekwakazara uye probe inotumira ruzivo rwetraffic kumuunganidzi.
- Ruzivo nezve a file kuchinjisa kunozoonekwa muunganidzi kana kutamiswa kwapera, izvo zvinogona kutora nguva yakawanda. Kana iyo yekufambisa ichishanda kwenguva yakareba (Active Traffic Timeout) inotaridzika seyakawanda mapfupi anoyerera.
- For example, ine 30 maminetsi anoshanda traffic timeout, 45 maminetsi ekutaurirana acharatidza seaviri anoyerera: imwe 30 min uye imwe 15 min.
Traffic Timeouts
- Iyo probe inoburitsa yose inoyerera, i.e. ese mapaketi ari pamwechete. Kana pasina mapaketi anocherechedzwa kwenguva yakapihwa (Inactive Traffic Timeout), kuyerera kunoonekwa sekwakazara uye probe inotumira ruzivo rwetraffic kumuunganidzi.
- Ruzivo nezve a file kuchinjisa kunozoonekwa muunganidzi kana kutamiswa kwapera, izvo zvinogona kutora nguva yakawanda. Kana iyo yekufambisa ichishanda kwenguva yakareba (Active Traffic Timeout) inotaridzika seyakawanda mapfupi anoyerera. For example, ine 30 maminetsi anoshanda traffic timeout, 45 maminetsi ekutaurirana acharatidza seaviri anoyerera: imwe 30 min uye imwe 15 min.
- Unogona kuwana zvinyorwa zvine chekuita nechigadzirwa paInjiniya Portal pa icr.advantech.cz kero.
- Kuti utore Router yako Quick Start Guide, User Manual, Configuration Manual, kana Firmware enda kune Router Models peji, tsvaga inodiwa modhi, uye chinja kune Manuals kana Firmware tab, zvichiteerana.
- Iyo Router Apps yekumisikidza mapakeji uye zvinyorwa zviripo pane Router Mapurogiramu peji.
- ZveDevelopment Documents, enda kuDevZone peji.
Zvinyorwa / Zvishandiso
 |
ADVANTECH Router App Net Flow Pfix [pdf] Bhuku reMushandisi Router App Net Flow Pfix, App Net Flow Pfix, Net Flow Pfix, Flow Pfix, Pfix |
