FAQ - How to collect traffic statistics from VPLS VPN using SNMP

Latest reply: Dec 28, 2013 20:52:27 7003 7 1 0

Hi Guys, 


Monitoring your network, today, is mandatory,  for security, provisioning, maintenance reasons. But what can you do when, inside your MPLS cloud, you need to deliver services like VPLS or VLL? As you know, VPNs shares the same physical resource, same interfaces on the same routers. How to differentiate the services and implement traffic monitoring and statistics for each on them? 

You will find the answer below.


So, let me show you how to collect vpls traffic statistics on S7700 V100R006C00SPC800.

Let's take a simple scenario like this one:
FAQ - How to collect traffic statistics from VPLS VPN using SNMP-1299707-1

We have a VPN  up and running.  

display vsi name a2 verbose

 ***VSI Name               : a2

    Administrator VSI      : no
    Isolate Spoken         : disable
    VSI Index              : 0
    PW Signaling           : ldp
    Member Discovery Style : static
    PW MAC Learn Style     : unqualify
    Encapsulation Type     : vlan
    MTU                    : 1500
    Diffserv Mode          : uniform
    Mpls Exp               : --
    DomainId               : 255
    Domain Name            :
    Ignore AcState         : disable
    P2P VSI                : disable
    Create Time            : 2 days, 1 hours, 20 minutes, 40 seconds
    VSI State              : up                                                            

    VSI ID                 : 2
   *Peer Router ID         : 8.8.8.8
    primary or secondary   : primary
    ignore-standby-state   : no
    VC Label               : 1026
    Peer Type              : dynamic
    Session                : up
    Tunnel ID              : 0x2f
    Broadcast Tunnel ID    : 0x2f
    Broad BackupTunnel ID  : 0x0
    CKey                   : 8
    NKey                   : 7
    Stp Enable             : 0
    PwIndex                : 0

    Interface Name         : Ethernet2/0/5.10
    State                  : up
    Access Port            : false
    Last Up Time           : 2013/04/17 15:57:55
    Total Up Time          : 2 days, 0 hours, 57 minutes, 27 seconds

  **PW Information:

   *Peer Ip Address        : 8.8.8.8
    PW State               : up
    Local VC Label         : 1026
    Remote VC Label        : 27648
    PW Type                : label
    Tunnel ID              : 0x2f
    Broadcast Tunnel ID    : 0x2f
    Broad BackupTunnel ID  : 0x0
    Ckey                   : 0x8
    Nkey                   : 0x7
    Main PW Token          : 0x2f
    Slave PW Token         : 0x0
    Tnl Type               : LSP
    OutInterface           : Vlanif127
    Backup OutInterface    :
    Stp Enable             : 0
    PW Last Up Time        : 2013/04/18 18:39:42
    PW Total Up Time       : 1 days, 19 hours, 14 minutes, 30 seconds


Now let's focus on our problem, how to collect VPN traffic statistics using SNMP: 
1. Enable traffic statistics on VSI configuration.
#
vsi a2 static
pwsignal ldp
  vsi-id 2
  peer 8.8.8.8
  traffic-statistics enable 

After we enable statistics, chip will allocate resource and start counting the packets and the number of bytes that are passing through vsi:

<SW7-S7703>display traffic-statistics vsi a2
vsi-name: a2
Peer-address: 8.8.8.8
Negotiation-vc-id: 2
Statistics last cleared: never
Last 300 seconds input rate : 154 bytes/sec, 1 packets/sec
Last 300 seconds output rate: 154 bytes/sec, 1 packets/sec
Input: 4014252 bytes, 31432 packets
Output: 4013982 bytes, 31429 packets 


2. Adjust snmp configuration.

snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF00001AA7
snmp-agent community write adminnms2 mib-view isoview
snmp-agent sys-info version v2c v3
snmp-agent target-host inform address udp-domain 1.1.1.2 params securityname adminnms2 v2c
snmp-agent mib-view included isoview iso
snmp-agent trap enable

3. Even if you have Huawei eSight or Cacti or other vendor NMS,  use this OID to query VPLS statistics. 

 hwVplsLdpStatisticsTable
1.3.6.1.4.1.2011.5.25.119.1.1.9.1.

hwVplsLdpStatInTrafficRate[4]
hwVplsLdpStatOutTraficRate[5]

Result:
Walk the OID and you'll see traffic statistics returned via SNMP.
hwVplsLdpStatisticsTable
-----------------------------------------------------------------------------------------------------
1.3.6.1.4.1.2011.5.25.119.1.1.9.1.8.2.97.50.2.8.8.8.8 : 4012972
1.3.6.1.4.1.2011.5.25.119.1.1.9.1.9.2.97.50.2.8.8.8.8 : 4012958
1.3.6.1.4.1.2011.5.25.119.1.1.9.1.10.2.97.50.2.8.8.8.8 : 31426
1.3.6.1.4.1.2011.5.25.119.1.1.9.1.11.2.97.50.2.8.8.8.8 : 31424

------------------------------------------------------------------------------------------------- 

I hope to find this thread useful.

  • x
  • convention:

anand981
Created Dec 18, 2013 06:43:47 Helpful(0) Helpful(0)

Hi Boss,

How to collect vll traffic statistics, i.e which commands to be given ;apart from that of ISIS & ldp peers .
Can i get the set of MIBS  as well to be used for this requirements.

Interface Eth-Trunk11. 3635 (BX)
qinq termination pe-vid 3635 ce-vid 1689  to 1712
mpls l2vc 10.50.6.11 3635 control-word

Interface Eth-Trunk11. 3635(AX)
qinq stacking vid 1689  to  1712 pe-vid 3635

mpls l2vc 10.50.6.10 3635 control-word



  • x
  • convention:

StarOfWest
Created Dec 18, 2013 07:06:23 Helpful(0) Helpful(0)

Workaround for collecting VLL traffic statistics via SNMP
  • Knowledge Base Article
    • Document No.: KB1000025610 • Category: Cases • knowledgeSecurity: Level D • Online Date: 2013-03-26 • Author: b00745015
    Abstract

    Customer request a way to collect traffic statistics via SNMP for VLL VPN on S7700.

    Keywords

    VLL, vlan, OID, MIB, statistics, traffic, MPLS, SNMP

 

For S7700 V100R006C00SPC800 there is no OID or MIB available, that could query VLL vpn traffic statistics and send via SNMP to a network monitoring server. So we need to find a good workaround for this requirement.
Alarm Information
First we've tried to enable statistics on vlanif interface associated with that VLL.

interface Vlanif400
description VLL
mpls l2vc 1.1.1.9
statistic enable both

interogating the OID always get value "0"
{Linux @nms ~]$snmpwalk -v2c -c XXX 1.1.1.9 ifHCInOctets.194
.1.3.6.1.2.1.31.1.1.1.6.194 = Counter64: 0

Cause ***ysis
The OID return always "0" because statistics values are always "0" when we have MPLS L2VC configured on vlanif400

Vlanif400 current state : UP
Line protocol current state : UP
Description:VLL
Route Port,The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
L2VPN connection of the main PW is up
L2VPN connection of the second PW is down
Last 300 seconds input rate 0 bits/sec, 0 packets/sec
Last 300 seconds output rate 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes
Output: 0 packets, 0 bytes

Input bandwidth utilization : --
Output bandwidth utilization : --

If i remove "mpls l2vc 1.1.1.9" statistics will be available on vlanif interface

display interface Vlanif 400Vlanif58 current state : UP
Line protocol current state : UP
Last line protocol up time : 2013-03-13 20:49
Description:HUAWEI, Quidway Series, Vlanif400 Interface
Route Port,The Maximum Transmit Unit is 1500
Last 300 seconds input rate 0 bits/sec, 0 packets/sec
Last 300 seconds output rate 0 bits/sec, 0 packets/sec
Input: 46501 packets, 5098014 bytes
Output: 0 packets, 0 bytes
Input bandwidth utilization : --
Output bandwidth utilization : --
When I query ifHCInOctets 1.3.6.1.2.1.31.1.1.1.6 returns the right value - 5098014 bytes

Conclusion - statistics on Vlanif are not available on vlaif interface when mpls vll is enable on it.
Handling Process
The second try was to use vlan statistics instead of vlanif statistics

Disable statistics on vlanif 667
Enable statistics on vlan 667 only

[77] vlan 667
[77-vlan77] statistics enable

Statistics will look like this :

display vlan 400 statistics
Board: 2
VLAN: 400
--------------------------------------------------------------------------
Item Packets Bytes
--------------------------------------------------------------------------
Inbound 3,904 412,542
Outbound 4,043 425,278

in order to collect traffic statistics from vlan we can use this OID 1.3.6.1.4.1.2011.5.25.32.4.1.4.4.1. hwXQoSVlanStatVlanId.


Suggestions and Summary
We can use vlan statistics in order to collect VLL vpn traffic rate, since there is no OID implemented to query directly VLL, yet.

 

  • x
  • convention:

StarOfWest
Created Dec 18, 2013 07:09:40 Helpful(0) Helpful(0)

so enable statistics on vlan.

example:

 

Interface Eth-Trunk11. 3635

[77] vlan 3635

[77-vlan77] statistics enable

Statistics will look like this :

display vlan 3635 statistics
Board: 2

 

  • x
  • convention:

anand981
Created Dec 18, 2013 12:11:50 Helpful(0) Helpful(0)

Hi b00745015,


Here the query is misunderstood, my intention is to get VLL/VSI/ISIS peer/LDP peer

UP or DOWN status through monitoring server ;for that we require the OID's to get alerted.


Regards

Kumar


  • x
  • convention:

StarOfWest
Created Dec 19, 2013 01:48:20 Helpful(0) Helpful(0)

 

So you want  see some TRAP OIDs. Here you are.

 

mplsLdpSessionUp
The OID of this object is 1.3.6.1.2.1.10.166.4.0.3.

 

mplsLdpSessionDown
The OID of this object is 1.3.6.1.2.1.10.166.4.0.4.

 

hwPwVcDown
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.2.3.

hwPwVcUp
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.2.4.

hwPWVcBackup
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.2.6.

hwSvcDeleted
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.4.5.
hwSvcDown
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.4.3.
hwSvcUp
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.4.1.4.4.

hwVplsVcDeleted
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.7.

hwVplsVcDown
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.1.

hwVplsVcUp
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.2.

hwVplsVsiDeleted
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.6.

hwVplsVsiDown
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.3.

hwVplsVsiUp
The OID of this object is 1.3.6.1.4.1.2011.5.25.119.1.2.4.

isisAdjacencyChange
The OID of this object is 1.3.6.1.3.37.2.0.17.

 

 

  • x
  • convention:

anand981
Created Dec 23, 2013 11:49:28 Helpful(0) Helpful(0)

 Hi b00745015,

Can you also please give me the config part for this.. the below isnt working fine..

snmp-agent

snmp-agent local-engineid 800007DB03101B54863170
snmp-agent community read cipher xxxxxxx
snmp-agent sys-info version all
snmp-agent target-host inform address udp-domain 192.168.123.102 params securityname cipher xxxxxxx v2c
snmp-agent mib-view included LDP mplsLdpInitSessionThresholdExceeded
snmp-agent mib-view included LDP mplsLdpSessionUp
snmp-agent mib-view included LDP mplsLdpSessionDown
snmp-agent mib-view included LDP mplsLdpLsrId
snmp-agent mib-view included LDP hwStaticLspEntry
snmp-agent mib-view included VCStatus hwPWVcSwitchWtoP
snmp-agent trap enable feature-name L2VPN
snmp-agent trap enable feature-name ISIS
snmp-agent trap enable feature-name ldp

snmp-agent trap enable feature-name CONFIGURATION


regards

Kumar

  • x
  • convention:

StarOfWest
Created Dec 28, 2013 20:52:27 Helpful(0) Helpful(0)

add iso root

<Quidway> system-view
[Quidway] snmp-agent community read public mib-view test
[Quidway] snmp-agent community write private mib-view test
[Quidway] snmp-agent mib-view included test iso

 

  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login