Wanguard 6.2 User Guide
Configuration » Components » Flow Sensor
●
Time Settings
– The time offset between the time zone (TZ) of the Flow Sensor server and the flow
exporter. Running NTP on both devices to keep their clocks synchronized is a critical requirement for
Flow Sensor.
●
IP Zone
– Flow Sensor needs an IP Zone from which to learn the monitored network's boundaries and to
extract per-subnet settings. For more information about IP Zones consult the “IP Zone” chapter on page
●
Graphs Accuracy
– Low values increase the accuracy of Sensor graphs, at the expense of increasing the
RAM usage. Setting this to under 20 seconds is not recommended.
●
IP Validation
– This option can be used to distinguish the direction of traffic or to ignore certain flows:
○
Off –
Flow Sensor examines all flows and the traffic direction is established on interface level.
○
On –
Flow Sensor examines the flows that have the source and/or the destination IP in the selected
IP Zone.
○
Strict –
Flow Sensor examines only the flows that have either the source or the destination IP in the
IP Zone.
○
Exclusive
– Flow Sensor examines only the flows that have the destination IP in the IP zone, but not
the source IP.
●
AS Validation
– Flows from BGP-enabled routers usually contain the source and destination AS
(Autonomous System) number. In most configurations, if the AS number is set to 0, then the IP address
belongs to your AS. If enabled, only flows having the AS number set to “0” (your AS) are processed. This
rarely-used option is used for establishing traffic direction. AS validation has three choices:
○
Off –
Disables AS validation.
○
On –
Only flows that have the source ASN and/or the destination ASN set to 0 are analyzed.
○
Strict –
Only flows that have either the source ASN or the destination ASN set to 0 are analyzed.
●
SNMP Settings
– Configure the SNMP settings of the flow exporter to allow Console to extract interface
information. When the SNMP settings are not configured, you must enter the SNMP index, speed, etc.
manually for each interface.
●
Monitored Network Interfaces
– The list of interfaces that should be monitored. To avoid producing
duplicate flow entries, add only upstream interfaces. Settings per interface:
○
SNMP Index
– The interfaces are identifiable only by their SNMP indexes. Enter the index manually,
or configure the SNMP settings.
○
Interface Name
– A short description used to identify the monitored interface. Descriptions longer
than 10 characters clutter some reports.
○
Graph Color
– The color used in graphs for the interface. The default color is a random one, which
can be changed by entering a different HTML color code or by clicking the drop-down menu.
○
Traffic Direction
– The direction of traffic entering the interface, relative to your network:
•
“Auto” – Set to establish the direction of traffic by IP and/or AS Validation alone.
•
“Upstream” – Set for upstream interfaces, e.g. peering interfaces, interfaces connected to the
Internet.
•
“Downstream” – Set for downstream interfaces, e.g. customer interfaces, interfaces connected
to your network.
- 43 -
Summary of Contents for wanguard 6.2
Page 1: ......
