vflow-modify
This command is used to modify an existing vFlow configuration.
Syntax vflow-modify
|
name name-string |
Specify the flow name. |
|
scope local|fabric |
Specify the scope for the flow. |
|
Specify any of the following options: |
|
|
vnet vnet-name |
Specify the virtual network (vNET) for the flow. |
|
bd bridge-domain name |
Specify the bridge domain for the vFlow. |
|
vlan 0..4095 |
Specify the VLAN identifier for the flow. The value ranges between 0-4095. |
|
inner-vlan 0..4095 |
Specify the inner VLAN ID of the QinQ frame. |
|
in-port port-list |
Specify the ingress (input) port for the flow. |
|
out-port port-list |
Specify the egress (output) port for the flow. |
|
ether-type ipv4|arp|wake|rarp|vlan|ipv6|lacp|mpls-uni|mpls-multi|jumbo| dot1X|aoe|qinq|lldp|macsec|ecp|ptp|fcoe|fcoe-init|qinq-old |
Specify the EtherType for the flow. |
|
src-mac mac-address |
Specify the source MAC address for the flow . |
|
src-mac-mask mac-address |
Specify the source MAC address wildcard mask for the flow. |
|
dst-mac mac-address |
Specify the destination MAC address for the flow. |
|
dst-mac-mask mac-address |
Specify the destination MAC address wildcard mask for the flow. |
|
src-ip ip-address |
Specify the source IP address for the flow. |
|
src-ip-mask ip-address |
Specify the source IP address wildcard mask for the flow. |
|
dst-ip ip-address |
Specify the destination IP address for the flow. |
|
dst-ip-mask ip-address |
Specify the destination IP address wildcard mask for the flow. |
|
src-port src-port-number |
Specify the Layer 3 protocol source port for the flow. |
|
src-port-end src-port-end-number |
Specify the ending port for a range of source ports. |
|
src-port-mask src-port-mask-number |
Specify the source port mask. |
|
dst-port dst-port-number |
Specify the Layer 3 protocol destination port for the flow. |
|
dst-port-end dst-port-end-number |
Specify the ending port for a range of destination ports. |
|
dst-port-mask dst-port-mask-number |
Specify the destination port mask. |
|
dscp-start number |
Specify the starting DSCP number. This is a value between 0, and 63. |
|
dscp-end number |
Specify the ending DSCP number. This is a value between 0, and 63. |
|
dscp dscp-number |
Specify the 6-bit Differentiated Services Code Point (DSCP) of the flow. |
|
dscp-map dscp-map name|none |
Specify the DSCP map to apply on the flow. Please reapply if map priorities are updated. |
|
tos-start tos-start-number |
Specify the starting ToS number. |
|
tos-end tos-end-number |
Specify the ending ToS number. |
|
tos tos-number |
Specify the Type of Service (ToS) number for the flow. |
|
dropped|no-dropped |
Specify if the vFlow matches a dropped packet or forwards the packet. |
|
vlan-pri number |
Specify the priority for the VLAN. This is a value between 0 (lowest), and 7 (highest). |
|
inner-vlan-pri number |
Specify the priority for the inner VLAN. This is a value between 0 (lowest), and 7 (highest). |
|
internal-pri 0..7 |
Specify the internal priority as a value between 0, and 7. |
|
vrf vrf-name |
Specify the name of the VRF. |
|
ttl ttl-number |
Specify the time to live in seconds. |
|
proto tcp|udp|icmp|igmp|ip|icmpv6 |
Specify the Layer 3 protocol for the flow. |
|
tcp-flags fin|syn|rst|push|ack|urg|ece|cwr |
Specify the TCP flags to filter a vFlow. |
|
flow-class vflow-class name |
Specify the vFlow class. |
|
ingress-tunnel tunnel-name |
Specify the name of the ingress tunnel. |
|
egress-tunnel tunnel name |
Specify the name of the egress tunnel. |
|
bw-min bw-min-number |
Specify the minimum bandwidth in Gbps for the vFlow. This is a range from 0 to 40Gbps. |
|
bw-max bw-max-number |
Specify the maximum bandwidth in Gbps for the vFlow. This is a range from 0 to 40Gbps. |
|
burst-size auto |
Specify the burst size. This parameter auto-calculates the burst size based on the maximum bandwidth settings for the vFlow. You can also configure a burst-size number between 256B through 128MB. |
|
vrouter-name vrouter name |
Specify the vRouter name if you are configuring Policy-based Routing (PBR). You should not use this parameter unless you are configuring PBR. |
|
precedence default|0..15 |
Specify the traffic priority for the flow (between 0, and 15) |
|
action none|drop|to-port|to-cpu|trap|copy-to-cpu|copy-to-port|setvlan|add-outer-vlan|set-tpid|to-port-set-vlan|to-span|set-metadata|set-dscp|set-dmac|to-next-hop-ip|set-dmac-to-port|to-ports-and-cpu|set-vlan-pri|set-smac|drop-cancel-trap|to-ecmp-group|redirect-to-vrouter|strip-outer-vlan|cancel-switch-to-cpu |
Specify the forwarding action to apply to the flow. |
|
action-value number |
Specify an optional value argument for the forwarding action above (for example, a switch port number to forward the packet to). This is a value between 1, and 64. |
|
action-set-mac-value mac-address |
Specify a MAC address to apply the action. |
|
action-to-next-hop-ip-value ip-address |
Specify the next-hop IP address for packet redirection. |
|
action-to-ecmp-group-value static-ecmp-group group-name |
Specify the ECMP group for packet redirection. |
|
action-to-ports-value port-list |
Specify a port list to apply the action. |
|
mirror mirror-name |
Specify the name of the mirror configuration. |
|
process-mirror|no-process-mirror |
Specify to process mirrored traffic for the vflow. |
|
packet-log-max packet-log-max-number |
Specify the maximum packet count for log rotation in the flow. |
|
log-stats|no-log-stats |
Specify if you want to log statistics or not. |
|
stats-interval seconds |
Specify the interval to update packet statistics for the log (in seconds). This is a value between 1, and 604800. |
|
dur dur-number |
Specify the minimum duration required for the flow to be captured (in seconds). |
|
metadata metadata-number |
Specify a metadata number for the flow. |
|
transient|no-transient |
Specify whether to capture transient flows. |
|
vxlan vxlan-name |
Specify the name of the VXLAN. |
|
vxlan-ether-type ipv4|arp|wake|rarp|vlan|ipv6|lacp|mpls-uni|mpls-multi| jumbo|dot1X|aoe|qinq|lldp|macsec|ecp|ptp|fcoe|fcoe-init|qinq-old |
Specify the type of VXLAN. |
|
from-tunnel-decap|no-from-tunnel-decap |
Specify if you want to include tunnel terminated VXLAN packets. |
|
stp-state Disabled|Discarding|Learning|Forwarding packet-res l2-unicast|l2-unknown-unicast|l2-multicast|l2-unknown-multicast|l2-broadcast |
Specify the STP state. |
|
packet-res l2-unicast|l2-unknown-unicast|l2-multicast|l2-unknown-multicast|l2-broadcast |
Specify the packet resolution in ASIC. |
|
fwding-type vlan|vxlan|vle |
Specify the ASIC forwarding type. |
|
set-src ip-address |
Specify the source IP address of IPv4 packets. |
|
set-dst ip-address |
Specify the destination IP address of IPv4 packets. |
|
set-src-port set-src-port-number |
Specify the source port of IPv4 packets. |
|
set-dst-port set-dst-port-number |
Specify the destination port of IPv4 packets. |
|
src-vpg vpg-name |
Specify the source vPG name for Network Packet Broker (NPB) configuration. |
|
dst-vpg vpg-name |
Specify the destination vPG name for Network Packet Broker (NPB) configuration. |
|
bidir-vpg-1 vpg name |
Specify the name of the first bidirectional vPG for NPB configuration. |
|
bidir-vpg-2 vpg name |
Specify the name of the second bidirectional vPG for NPB configuration. |
|
transparency enable|disable |
Specify if you want to enable or disable protocol transparency. |
|
udf-name1 udf name |
Specify the User-Defined Field name. |
|
udf-data1 udf-data1-number |
Specify the User-Defined Field data. |
|
udf-data1-mask udf-data1-mask-number |
Specify the mask for the User-Defined Field data. |
|
udf-name2 udf name |
Specify the User-Defined Field name. |
|
udf-data2 udf-data2-number |
Specify the User-Defined Field data. |
|
udf-data2-mask udf-data2-mask-number |
Specify the mask for the User-Defined Field data. |
|
udf-name3 udf name |
Specify the User-Defined Field name. |
|
udf-data3 udf-data3-number |
Specify the User-Defined Field data. |
|
udf-data3-mask udf-data3-mask-number |
Specify the mask for the User-Defined Field data. |
|
enable|no-enable |
Specify if you want to enable or disable flows in hardware. |
|
table-name vflow-table name |
Specify a table name from the following list:
The following actions are supported for this parameter:
|
|
flow-cb default-cb|arp-cb|bcast-cb|igmp-cb|pim-cb|dhcp-cb|dhcpv6-cb|dmac-miss-cb|l2-miss-cb|no-cb |
CPU to process, vFlow callback function. |
|
cpu-class cpu-class name |
Specify the CPU class name. |
|
description description-string |
Specify a vFlow description. |
|
if mgmt|data |
Specify the administrative service interface. |
|
phy-dst-port phy-dst-port-number |
Specify the packet destination port for the vFlow. |
Defaults None.
Access CLI
History
|
Version 1.2 |
Command introduced. |
|
Version 2.1 |
The parameter type is deprecated. The option cluster for scope is deprecated. The option meter, for action is deprecated. The parameters mirror|no mirror, and process-mirror|no-process-mirror added. |
|
Version 2.2.3 |
The parameters dscp-start, dscp-end, tos-start, tos-end, vlan-pri, and ttl added. |
|
Version 2.2.5 |
The parameters set-dscp|to-ports-and-cpu|set-vlan-pri| set-dmac|set-dmac-to-port, action-set-mac-value, and action-to-ports-value added. The parameter mirror added. The parameter mirror|no-mirror changed to process-mirror|no-process-mirror. |
|
Version 2.3 |
The parameters set-src, set-dst, set-src-port, and set-dst-port added. |
|
Version 2.3.1 |
The parameter table added. |
|
Version 2.4 |
The parameters type, and stats, deprecated. The parameters src-port-mask, and dst-port-mask added. The action, to-port-set-nat, is deprecated. The parameter log-stats added. |
|
Version 2.5.3 |
The parameter tcp-flags added. The fields, UDF-, and enable|disable hardware flows also added. |
|
Version 2.5.4 |
The parameter burst-size auto has added functionality. You can configure a burst-size number between 256B through 128MB. |
|
Version 2.6.0 |
The parameter table-name added. |
|
Version 2.6.2 |
The parameter dscp-map and cpu-class added. |
|
Version 3.0.0 |
The parameter dropped|no-dropped added. |
|
Version 5.0.0 |
The parameter if mgmt|dat aadded. |
|
Version 5.1.0 |
The parameter packet-res added. |
|
Version 5.2.0 |
The parameters src-port-end, and dst-port-end added |
|
Version 6.0.0 |
The parameter vrf added. |
|
Version 6.0.1 |
The parameters src-vpg, and dst-vpg added. |
|
Version 6.1.0 |
The parameters bd, inner-vlan, inner-vlan-pri, internal-pri, dst-vpg-1, dst-vpg-2, transparency, flow-cb added. |
|
Version 7.0.0 |
The option strip-outer-vlan added to parameter action. |
|
Version 7.0.1 |
The options check, tunnel-pkt, cpu, set-tunnel-id, cpu-rx, cpu-rx-tx, decap, tcp-seq-offset, tcp-ack-offset, and l3-to-cpu-switch for parameter action are deprecated. The parameter vxlan-proto is deprecated. |
Usage Each fabric, cluster, standalone switch, or virtual network can track application flow statistics. This command initiates flow statistics capture for Layer 2 Ethernet or Layer 3 Internet Protocol (IP) packet traffic that matches defined characteristics.
Examples
- This example shows how to modify the flow statistics capture for a flow named flow3 to specify that a duplicate of all matching traffic be forwarded to the switch controller for further analysis.
CLI (network-admin@switch) > vflow-modify name flow3 action copy-to-cpu
- This example, shows how to create a vFlow with a burst size of 12MB. This is useful because different burst-sizes can be used for different types of metered traffic. For example, if a metered application produces bursty traffic patterns, such as clicking on a Web page link redirecting you to a media-rich page, you can now configure higher burst levels than the pre-calculated default burst levels.
CLI (network-admin@switch) > vflow-modify name flow1 scope local in-port 12 bw-max 5G burst-size 12M