Description

This is a configuration example for J-Flow on SRX devices.

Symptoms

You have a complaint that the same configuration is working on the other routers, but not as well on the SRX Series device.

Users with the following configuration may face some issues with the J-Flow servers, such as server not able to receive the flow from the SRX device intermittently.

#show interfaces ge-0/0/0
unit 0 {
     family inet {
         filter {
             input flow-filter;
         }
         address 1.1.1.1/30;
     }
}

#show firewall
filter flow-filter {
    term 1 {
        then {
            sample;
            accept;
        }
     }
}

#show forwarding-options
sampling {
    input {
        rate 100;
    }
    family inet {
        output {
            flow-server 2.2.2.2 {
                port <JFlow port number e.g. 2055,2056> ;
                version 5;
            }
        }
    }
}
 

Solution

The solution is to switch to a more simpler configuration without filters.

In the following example, a lower amount of processing is involved, as we have bypassed the additional Filter Configuration.

#show interfaces ge-0/0/0
unit 0 {
    family inet {
        sampling {
            input;
            output;
        }
       address 1.1.1.1/30;
    }
}

#show forwarding-options
sampling {
     input {
         rate 100;
     }
     family inet {
         output {
             flow-server 2.2.2.2 {
                 port <JFlow port number e.g. 2055,2056> ;
                 version 5;
             }
        }
     }
}

Modification History

2020-06-27: Removed J Series references.

Related Information