[j-nsp] Viewing Prefix-Specific Action statistics

[John Ou]

It represents the counter number for the corresponding prefixes.
The maximal PSA counter can be displayed is 2^16=65536 (0-65535).
It is one-to-one mapping to the host in ascending order. See
the userdoc in detail. Thanks.
--John
-----Original Message-----
From: Tay Chee Yong [mailto:tcy at pacific.net.sg]
Sent: Thursday, February 27, 2003 8:21 AM
To: John Ou
Cc: juniper-nsp at puck.nether.net
Subject: RE: [j-nsp] Viewing Prefix-Specific Action statistics


Hi John,

Some questions.

What does the number 0-65535 behind the name/policer means? Does it refer to
the
policer for the particular prefix? How do I know which policer is mean for
which
/32 address?

Does the values here refers to the number of bytes/packets within the 256k
shaping, or number of bytes/packets being discard.

Please advise.

Thanks.

Regards,
Cheeyong

On Thu, 27 Feb 2003, John Ou wrote:

: Cheeyong,
: The correct syntax should be
: > run show firewall prefix-action-stats filter inbound-acl prefix-action
: police-per-prefix-shape
: You need append the term name to the prefix-acton with "-" in order to
view
: the policer counters for that term. Let me know if it works. Thanks.
: --John
: -----Original Message-----
: From: juniper-nsp-bounces at puck.nether.net
: [mailto:juniper-nsp-bounces at puck.nether.net]On Behalf Of Tay Chee Yong
: Sent: Thursday, February 27, 2003 7:48 AM
: To: juniper-nsp at puck.nether.net
: Subject: [j-nsp] Viewing Prefix-Specific Action statistics
:
:
: Hi People,
:
: I had implemented the Prefix-Specific Action on our Juniper routers, and
it
: working well. However, I am unable to view the statistics of how many
: packets/bytes had been policed/discard by the policer.
:
: My configuration is as follows:
:
: [edit firewall]
: user at router# show
: policer rate-256k {
:     if-exceeding {
:         bandwidth-limit 256k;
:         burst-size-limit 32k;
:     }
:     then discard;
: }
: family inet {
:     prefix-action police-per-prefix {
:         policer rate-256k;
:         count;
:         subnet-prefix-length 21;
:         destination-prefix-length 32;
:     }
: }
:
: [edit firewall filter <inbound-acl>]
: user at router# show
:
: term shape {
:     from {
:         destination-address {
:             192.168.0.0/21;
:         }
:         protocol tcp;
:     }
:     then {
:         sample;
:         prefix-action police-per-prefix;
:     }
: }
:
: However, using the command "show firewall prefix-action-stats" is unable
to
: produce any statistics.
:
: user at router# run show firewall prefix-action-stats filter inbound-acl
: prefix-action police-per-prefix
: Filter: inbound-acl
:
: Could someone please enlighten me? Thanks.
:
: Regards,
: Cheeyong
: _______________________________________________
: juniper-nsp mailing list juniper-nsp at puck.nether.net
: http://puck.nether.net/mailman/listinfo/juniper-nsp
: