SRX Services Gateway
Highlighted
SRX Services Gateway

SRX 5600 with J-Flow version9

‎09-28-2018 04:03 AM

Hi,

 

I've had success in setting up J-Flow version9 directed at a single flow-server, but cannot find a way to direct the flows to two flow servers.

 

I have tried creating multiple instances but to no avail.

 

Is there a quirky way to get around this issue?

 

Thanks

7 REPLIES 7
Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:05 AM

I have had it exporting to two flow servers with version 5, but the only issue is the source-address.

 

I have specified the source-address in the configuration but the SRX doesn't use this and instead uses the FXP source-address.

Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:30 AM
Do you have any IP address/interface part of inet0 other than fxp0? If not what you see is expected behavior.
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:36 AM

Ok, no I have a routing-instance which contains every other interface. inet0 only has FXP0.

Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:42 AM
You may create a loopback interface with a address and place in inet0. SRX will start sending flow with that IP address.
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:48 AM

Thanks, I will try that with version 5.

 

Is there any option you know of to send traffic to two flow servers with version9?

 

 

Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-28-2018 05:50 AM
I need to check this and get back to you.
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX 5600 with J-Flow version9

‎09-29-2018 09:00 PM

Routing flow data via fxp is not a best practice in in general.

 

-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.
Feedback