RE: [j-nsp] howto monitor the policer- example

From: Andrew Ramsey (akramsey@juniper.net)
Date: Fri Feb 15 2002 - 13:06:11 EST


forgot this...

firewall {
    policer out-contract {
        if-exceeding {
            bandwidth-limit 500k;
            burst-size-limit 1500;
        }
        then discard;
    }
    filter foo {
        term one {
            from {
                source-address {
                    10.1.1.0/24;
                }
            }
            then {
                count total-contract;
                policer out-contract;
                accept;
            }
        }
    }
}

[edit]
lab@M40-R42# run show firewall
Filter: foo
    total-contract
                    0 packets 0 bytes
    out-contract-one
                    0 packets

Andy

> -----Original Message-----
> From: Andrew Ramsey
> Sent: Friday, February 15, 2002 12:49 PM
> To: Sergio Gomes; juniper-nsp@puck.nether.net
> Subject: RE: [j-nsp] howto monitor the policer
>
>
> if you show firewall it will be there
>
> Andy
>
> > -----Original Message-----
> > From: Sergio Gomes [mailto:sgomes@busca.pt]
> > Sent: Friday, February 15, 2002 1:25 PM
> > To: juniper-nsp@puck.nether.net
> > Subject: [j-nsp] howto monitor the policer
> >
> >
> > How you can monitor a policer. I need to know how many
> > packets are in the contract and how many are not. You can
> > use a counter for the term in the filter, but not for the policer.
> >
> > root@ruteador# set firewall filter prueba policer prueba then ?
> > Possible completions:
> > + apply-groups Groups from which to inherit
> configuration data
> > discard Discard the packet
> > forwarding-class Classify packet to forwarding class
> > loss-priority Classify packet to loss-priority
> > [edit]
> >
> > root@ruteador# set firewall filter prueba term 10 then ?
> > Possible completions:
> > accept Accept the packet
> > + apply-groups Groups from which to inherit
> configuration data
> > count Count the packet in the named counter
> > discard Discard the packet
> > forwarding-class Classify packet to forwarding class
> > ipsec-sa Use specified IPSec Security Association
> > log Log the packet
> > loss-priority Classify packet to loss-priority
> > policer Police the packet using the named policer
> > > reject Reject the packet
> > routing-instance Provide routing instance
> > sample Sample the packet
> > syslog Syslog information about the packet
> > [edit]
> > root@ruteador#
> >
> > *****************************
> > Sergio G.
> > Pedra que rola nao cria limo.
> > *****************************
> >
> > ---------------------------------------
> > Email gratuito do Portal Busca - http://webmail.busca.pt
> > Mais um servico do Portal Busca - http://www.busca.pt
> >
> >
>
>



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:39 EDT