[j-nsp] Cisco microflow equivalent on Juniper

Kristian Larsson kristian at spritelink.se
Wed Oct 18 13:21:08 EDT 2006


On Wed, Oct 18, 2006 at 06:52:06PM +0200, Alan Gravett wrote:
> The microflow word seems to imply they can look into more than just
> source/destination IP addresses.
Pff, probably just a pretty word that marketing
came up with ;)

I'm not sure if they're capable or not, I've
actually never used microflow policers, just read
about them. However I do have a few Cisco 6500s so
I'm planning on trying them out in the near
future.

Even if it is possible to look at more than just
src/dst ip that is of no interest of me so doesn't
really matter what the juniper is capable of in
this respect.

The reason I'm looking at Juniper is that it would
seem Cisco has a limit of 100 000 or so sessions
and so if say 10000 users used 10 sessions each it
would work out but I can imagine that it could
quite easily grow beyond that.
Therefore I'm looking at Juniper too see if it can
support more policers / users.

Anyone have actual experience with this?


> But the rest of what you describe should be doable using Prefix Specific
> Counters & Policers (PSCP),
> kind of dynamically creates policers and/or counters for individual IP
> addresses or blocks of then.
Have you done this? How well do they scale, will I
be able to support 10k users?

As I don't have a Juniper I can't really try it
out either :(

> Search "prefix specific policers" in the documentation or jnpr website for
> more info.
Will do, thanks for the pointer.

Regards,
   Kristian.

-- 
Kristian Larsson                                   KLL-RIPE
Network Engineer                      Net at Once [AS35706]
+46 704 910401			     kristian at spritelink.se


More information about the juniper-nsp mailing list