Description

How to configure an IPFIX collector

Symptoms

Configuration Assistance

Solution

The SSR supports IPFIX and it is possible to leverage IPFIX records to investigate traffic traversing an SSR.  Please review the SSR IPFIX documentation here: https://www.juniper.net/documentation/us/en/software/session-smart-router/docs/concepts_application_discovery/#ipfix

 

This can be configured in the SSR ui via: Configuration -> Authority -> IPFIX collection settings.

 

Once configured, you can get a packet capture from the linux cli as root to verify: 

[root@]# tcpdump -nnei any port 4739

05:27:48.431976 Out 00:50:56:xx:xx:xx ethertype IPv4 (0x0800), length 232: y.y.y.y.35281 > x.x.x.x.4739: UDP, length 188

05:27:48.432109 Out 00:50:56:xx:xx:xx ethertype IPv4 (0x0800), length 232: y.y.y.y.35281 > x.x.x.x.4739: UDP, length 188

 

Modification History

2025-04-18 : Article Created

9/23/26 - Added doc reference, removed doc content that was not displaying correctly, cleaned kb up a bit in content and formatting, etc. Also corrected Data Categories.