[j-nsp] Verify loss priority for a forwarding class

Addy Mathur addy.mathur at gmail.com
Sat Mar 13 18:18:31 EST 2010


Just realized that you're using an M7i - this is not supported.  The
other thing I can think of would be to configure a tos/dscp rewrite
rule on egress for that specific forwarding-class and loss-priority
high, and confirm the tos/dscp values on the tester.

--Addy.


On 3/13/10, meryem Z <meryem_z at hotmail.com> wrote:
>
> Hello ,
>
> There is no "loss-priority" criteria to match on it.
> Possible completions are below:
>
> Thanks.
>
>
>
> # set firewall filter test_plp term 1 from ?
> Possible completions:
>> address              Match IP source or destination address
> + ah-spi               Match IPSec AH SPI value
> + ah-spi-except        Do not match IPSec AH SPI value
> + apply-groups         Groups from which to inherit configuration data
> + apply-groups-except  Don't inherit configuration data from these groups
>> destination-address  Match IP destination address
> + destination-class    Match destination class
> + destination-class-except  Do not match destination class
> + destination-port     Match TCP/UDP destination port
> + destination-port-except  Do not match TCP/UDP destination port
>> destination-prefix-list  Match IP destination prefixes in named list
> + dscp                 Match Differentiated Services (DiffServ) code point
> + dscp-except          Do not match Differentiated Services (DiffServ) code
> point
> + esp-spi              Match IPSec ESP SPI value
> + esp-spi-except       Do not match IPSec ESP SPI value
>   first-fragment       Match if packet is the first fragment
> + forwarding-class     Match forwarding class
> + forwarding-class-except  Do not match forwarding class
>   fragment-flags       Match fragment flags (in symbolic or hex formats)
> + fragment-offset      Match fragment offset
> + fragment-offset-except  Do not match fragment offset
> + icmp-code            Match ICMP message code
> + icmp-code-except     Do not match ICMP message code
> + icmp-type            Match ICMP message type
> + icmp-type-except     Do not match ICMP message type
>> interface            Match interface name
> + interface-group      Match interface group
> + interface-group-except  Do not match interface group
>> interface-set        Match interface in set
> + ip-options           Match IP options
> + ip-options-except    Do not match IP options
>   is-fragment          Match if packet is a fragment
> + packet-length        Match packet length
> + packet-length-except  Do not match packet length
> + port                 Match TCP/UDP source or destination port
> + port-except          Do not match TCP/UDP source or destination port
> + precedence           Match IP precedence value
> + precedence-except    Do not match IP precedence value
>> prefix-list          Match IP source or destination prefixes in named list
> + protocol             Match IP protocol type
> + protocol-except      Do not match IP protocol type
>   service-filter-hit   Match if service-filter-hit is set
>> source-address       Match IP source address
> + source-class         Match source class
> + source-class-except  Do not match source class
> + source-port          Match TCP/UDP source port
> + source-port-except   Do not match TCP/UDP source port
>> source-prefix-list   Match IP source prefixes in named list
>   tcp-established      Match packet of an established TCP connection
>   tcp-flags            Match TCP flags (in symbolic or hex formats)
>   tcp-initial          Match initial packet of a TCP connection
> [edit]
> Meriem at liscr2# set firewall filter test_plp term 1 from
>
>> Date: Thu, 11 Mar 2010 07:14:31 -0500
>> Subject: Re: [j-nsp] Verify loss priority for a forwarding class
>> From: addy.mathur at gmail.com
>> To: meryem_z at hotmail.com; david.roy at orange-ftgroup.com;
>> juniper-nsp at puck.nether.net
>>
>> Meryem:
>>
>> Maybe try a firewall filter with a counter on the egress interface?
>> Something like:
>>
>> from forwarding-class <forwarding-class_name>
>> from loss-priority high
>> then count fc-blah_lp-high
>> then accept
>>
>> --Addy.
>>
>>
>> On 3/11/10, meryem Z <meryem_z at hotmail.com> wrote:
>> >
>> > Hello David ,
>> >
>> > Thanks for your response, but this command is supported M320 routers and
>> > T-series routing platforms only..
>> > Is there any equivalent for M7i routers ?
>> >
>> >
>> > Thank you.
>> >
>> >
>> >> From: david.roy at orange-ftgroup.com
>> >> To: meryem_z at hotmail.com
>> >> CC: juniper-nsp at puck.nether.net
>> >> Date: Wed, 10 Mar 2010 14:12:10 +0100
>> >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class
>> >>
>> >> Hi,
>> >>
>> >> You can view drops at the fabric level via the command :
>> >>
>> >>  show class-of-service fabric statistics
>> >>
>> >> David
>> >>
>> >>
>> >>
>> >>
>> >> David Roy
>> >> Orange France - RBCI IP Technical Assistance Center
>> >> Tel.   +33(0)299876472
>> >> Mob. +33(0)685522213
>> >> Email. david.roy at orange-ftgroup.com
>> >>
>> >>
>> >> -----Message d'origine-----
>> >> De : juniper-nsp-bounces at puck.nether.net
>> >> [mailto:juniper-nsp-bounces at puck.nether.net] De la part de meryem Z
>> >> Envoyé : mercredi 10 mars 2010 13:17
>> >> Cc : juniper-nsp at puck.nether.net
>> >> Objet : [j-nsp] Verify loss priority for a forwarding class
>> >>
>> >>
>> >> hello Community,
>> >>
>> >> I configured a forwarding class with high priority loss. Now I need to
>> >> verify that the traffic sent under this forwarding class ( using a
>> >> traffic
>> >> generator) has a high priority loss. The "show interface queue "
>> >> doesn't
>> >> show this information. is there any other way to do it ?
>> >>
>> >> Thank you.
>> >>
>> >>
>> >>  		 	   		
>> >> _________________________________________________________________
>> >> Votre messagerie et bien plus où que vous soyez. Passez à Windows Live
>> >> Hotmail, c'est gratuit !
>> >> https://signup.live.com/signup.aspx?id=60969
>> >> _______________________________________________
>> >> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> >> https://puck.nether.net/mailman/listinfo/juniper-nsp
>> >>
>> >> *********************************
>> >> This message and any attachments (the "message") are confidential and
>> >> intended solely for the addressees.
>> >> Any unauthorised use or dissemination is prohibited.
>> >> Messages are susceptible to alteration.
>> >> France Telecom Group shall not be liable for the message if altered,
>> >> changed or falsified.
>> >> If you are not the intended addressee of this message, please cancel it
>> >> immediately and inform the sender.
>> >> ********************************
>> >>
>> >  		 	   		
>> > _________________________________________________________________
>> > Hotmail : une messagerie performante et gratuite avec une sécurité
>> > signée
>> > Microsoft
>> > https://signup.live.com/signup.aspx?id=60969
>> > _______________________________________________
>> > juniper-nsp mailing list juniper-nsp at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>> >
>>
>> --
>> Sent from my mobile device
>  		 	   		
> _________________________________________________________________
> Hotmail : une messagerie performante et gratuite avec une sécurité signée
> Microsoft
> https://signup.live.com/signup.aspx?id=60969

-- 
Sent from my mobile device



More information about the juniper-nsp mailing list