Creating a Subscription
When you configure static telemetry subscription to the data sampled or a customized event, you need to create a subscription to associate the configured destination group with the configured sampling sensor group so that data can be sent to the collector.
Context
When static subscription is configured, a device functions as a client and a collector functions as a server. To statically subscribe to the data sampled or a customized event, you need to create a subscription to set up a data sending channel. The protocol used to send data can be gRPC or UDP.
Before configuring an SSL policy on the client to establish a secure SSL connection between the client and server, ensure that the SSL policy has been created. For details about how to create an SSL policy, see "Configuring and Binding an SSL Policy" in Configuration - Basic Configuration - Accessing Other Devices Configuration.
Procedure
- Create a static subscription based on gRPC.
- (Optional) Run protocol grpc [ no-tls ]
The protocol and encryption mode are configured for the destination collector that is associated with this subscription.
Both this command and the ipv6-address command in the destination-group view can configure a protocol and encryption mode for the destination collector. If the destination collector is associated with the subscription, command configurations take effect based on the following rules:If this command has been run, the protocol and encryption mode configured by running this command in the subscription view take effect.
If this command is not run, the protocol and encryption mode configured using the ipv6-address command in the destination-group view take effect.
- (Optional) Configure a maximum usage for the main control board's CPU used when telemetry collects data.
Run quit
Return to the telemetry view.
Run cpu-usage max-percent usage
A maximum usage is configured for the main control board's CPU used when telemetry collects data.
This command is supported only by the admin VS.
- (Optional) Configure an SSL policy for the client or enable the client to perform SSL verification on the server.
The certificate to be loaded must be supported by both the client and server.
Run quit
Return to the system view.
Run grpc
The gRPC view is displayed.
Run grpc client
The gRPC client view is displayed.
Run ssl-policy policy-name [ verify-cn cn-name | verify-san san ]
An SSL policy is configured for the client during static telemetry subscription.
If the no-tls parameter is specified in the ipv6-address port or protocol (subscription view) command, the TLS encryption mode is not used. In this case, the client-specific SSL policy configured by running this command does not take effect.
Run ssl-verify peer
The client is configured to perform SSL verification on a server during static telemetry subscription.
If the no-tls parameter is specified in the ipv6-address port or protocol (subscription view) command, the TLS encryption mode is not used. In this case, the configuration that enables the client to perform SSL verification on a server does not take effect.
- (Optional) Run dscp value
A DSCP value is set for data packets to be sent.
This configuration takes effect differently from the dscp command configured in the subscription view. This configuration takes effect on all connections of the gRPC client. If the dscp command is configured in both the gRPC client view and the subscription view, the DSCP value configured in the subscription view takes effect.
- (Optional) Run protocol grpc [ no-tls ]
- Create a static subscription based on UDP.
- Run protocol udp
A protocol and encryption mode are configured for the destination collector that is associated with this subscription.
Both this command and the ipv6-address port command in the destination-group view can configure a protocol and encryption mode for the destination collector. If the destination collector is associated with the subscription, command configurations take effect based on the following rules:If this command has been run, the protocol and encryption mode configured by running this command in the subscription view take effect.
If this command is not run, the protocol and encryption mode configured using the ipv6-address port command in the destination-group view take effect.
- Run protocol udp