Users Guide

ST=Spain/L=Valdepenias/O=Test/OU=Client/CN=localhost"
openssl x509 -passin pass:1234 -req -days 365 -in client.csr -CA ca.crt -CAkey
ca.key -set_serial 01 -out client.crt
e. Remove passphrase from the client key.
openssl rsa -passin pass:1234 -in client.key -out client.key
NOTE: The collector hostname (securesrc) is added to the server key.
f. Rename the file client.crt to os10host.crt, and client.key to os10host.key. Then, copy the ca.crt,
os10host.crt and os10host.key files to the OS10 switch.
g. Start the streaming telemetry collector in TLS mode.
Configure the host and CA certificate on the OS10 switch
1. Create an IP host entry for the collector IP on the switch. The hostname must be same as given in the streaming telemetry
collector.
OS10(config)# ip host securesrc collector_ip
2. Configure CA certificate in the switch. Copy the ca.crt file from the collector machine to the /home/admin path.
OS10# crypto ca-cert install home://ca.crt
OS10#crypto cert install cert-file home://os10host.crt key-file home://os10host.key
3. Once the CA certificate is installed, configure telemetry as explained in the Configure telemetry section.
NOTE: For destination, do not specify IP, instead specify the hostname.
OS10(conf-telemetry)# show configuration
!
telemetry
enable
!
destination-group dg01
destination securesrc 50000
!
subscription-profile sp01
sensor-group bgp
sensor-group interface
destination-group dg01
encoding gpb
transport grpc
source-interface ethernet1/1/1
OS10(conf-telemetry)#
Telemetry commands
debug telemetry
Starts data collection to troubleshoot telemetry operation.
Syntax
debug telemetry
Parameters None
Default Not configured
Command mode EXEC
Usage
information
Use the command to start a local telemetry collector. Connect to the local collector by configuring the
destination with loopback ip (127.0.0.1) and port 50051. For example:
● destination-group local-collector
● destination 127.0.0.1 50051
The local collector data logs will be stored in /var/log/grpc_server.log.
Telemetry 1733