[j-nsp] Verify loss priority for a forwarding class
Addy Mathur
addy.mathur at gmail.com
Sat Mar 13 18:18:31 EST 2010
Just realized that you're using an M7i - this is not supported. The
other thing I can think of would be to configure a tos/dscp rewrite
rule on egress for that specific forwarding-class and loss-priority
high, and confirm the tos/dscp values on the tester.
--Addy.
On 3/13/10, meryem Z <meryem_z at hotmail.com> wrote:
>
> Hello ,
>
> There is no "loss-priority" criteria to match on it.
> Possible completions are below:
>
> Thanks.
>
>
>
> # set firewall filter test_plp term 1 from ?
> Possible completions:
>> address Match IP source or destination address
> + ah-spi Match IPSec AH SPI value
> + ah-spi-except Do not match IPSec AH SPI value
> + apply-groups Groups from which to inherit configuration data
> + apply-groups-except Don't inherit configuration data from these groups
>> destination-address Match IP destination address
> + destination-class Match destination class
> + destination-class-except Do not match destination class
> + destination-port Match TCP/UDP destination port
> + destination-port-except Do not match TCP/UDP destination port
>> destination-prefix-list Match IP destination prefixes in named list
> + dscp Match Differentiated Services (DiffServ) code point
> + dscp-except Do not match Differentiated Services (DiffServ) code
> point
> + esp-spi Match IPSec ESP SPI value
> + esp-spi-except Do not match IPSec ESP SPI value
> first-fragment Match if packet is the first fragment
> + forwarding-class Match forwarding class
> + forwarding-class-except Do not match forwarding class
> fragment-flags Match fragment flags (in symbolic or hex formats)
> + fragment-offset Match fragment offset
> + fragment-offset-except Do not match fragment offset
> + icmp-code Match ICMP message code
> + icmp-code-except Do not match ICMP message code
> + icmp-type Match ICMP message type
> + icmp-type-except Do not match ICMP message type
>> interface Match interface name
> + interface-group Match interface group
> + interface-group-except Do not match interface group
>> interface-set Match interface in set
> + ip-options Match IP options
> + ip-options-except Do not match IP options
> is-fragment Match if packet is a fragment
> + packet-length Match packet length
> + packet-length-except Do not match packet length
> + port Match TCP/UDP source or destination port
> + port-except Do not match TCP/UDP source or destination port
> + precedence Match IP precedence value
> + precedence-except Do not match IP precedence value
>> prefix-list Match IP source or destination prefixes in named list
> + protocol Match IP protocol type
> + protocol-except Do not match IP protocol type
> service-filter-hit Match if service-filter-hit is set
>> source-address Match IP source address
> + source-class Match source class
> + source-class-except Do not match source class
> + source-port Match TCP/UDP source port
> + source-port-except Do not match TCP/UDP source port
>> source-prefix-list Match IP source prefixes in named list
> tcp-established Match packet of an established TCP connection
> tcp-flags Match TCP flags (in symbolic or hex formats)
> tcp-initial Match initial packet of a TCP connection
> [edit]
> Meriem at liscr2# set firewall filter test_plp term 1 from
>
>> Date: Thu, 11 Mar 2010 07:14:31 -0500
>> Subject: Re: [j-nsp] Verify loss priority for a forwarding class
>> From: addy.mathur at gmail.com
>> To: meryem_z at hotmail.com; david.roy at orange-ftgroup.com;
>> juniper-nsp at puck.nether.net
>>
>> Meryem:
>>
>> Maybe try a firewall filter with a counter on the egress interface?
>> Something like:
>>
>> from forwarding-class <forwarding-class_name>
>> from loss-priority high
>> then count fc-blah_lp-high
>> then accept
>>
>> --Addy.
>>
>>
>> On 3/11/10, meryem Z <meryem_z at hotmail.com> wrote:
>> >
>> > Hello David ,
>> >
>> > Thanks for your response, but this command is supported M320 routers and
>> > T-series routing platforms only..
>> > Is there any equivalent for M7i routers ?
>> >
>> >
>> > Thank you.
>> >
>> >
>> >> From: david.roy at orange-ftgroup.com
>> >> To: meryem_z at hotmail.com
>> >> CC: juniper-nsp at puck.nether.net
>> >> Date: Wed, 10 Mar 2010 14:12:10 +0100
>> >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class
>> >>
>> >> Hi,
>> >>
>> >> You can view drops at the fabric level via the command :
>> >>
>> >> show class-of-service fabric statistics
>> >>
>> >> David
>> >>
>> >>
>> >>
>> >>
>> >> David Roy
>> >> Orange France - RBCI IP Technical Assistance Center
>> >> Tel. +33(0)299876472
>> >> Mob. +33(0)685522213
>> >> Email. david.roy at orange-ftgroup.com
>> >>
>> >>
>> >> -----Message d'origine-----
>> >> De : juniper-nsp-bounces at puck.nether.net
>> >> [mailto:juniper-nsp-bounces at puck.nether.net] De la part de meryem Z
>> >> Envoyé : mercredi 10 mars 2010 13:17
>> >> Cc : juniper-nsp at puck.nether.net
>> >> Objet : [j-nsp] Verify loss priority for a forwarding class
>> >>
>> >>
>> >> hello Community,
>> >>
>> >> I configured a forwarding class with high priority loss. Now I need to
>> >> verify that the traffic sent under this forwarding class ( using a
>> >> traffic
>> >> generator) has a high priority loss. The "show interface queue "
>> >> doesn't
>> >> show this information. is there any other way to do it ?
>> >>
>> >> Thank you.
>> >>
>> >>
>> >>
>> >> _________________________________________________________________
>> >> Votre messagerie et bien plus où que vous soyez. Passez à Windows Live
>> >> Hotmail, c'est gratuit !
>> >> https://signup.live.com/signup.aspx?id=60969
>> >> _______________________________________________
>> >> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> >> https://puck.nether.net/mailman/listinfo/juniper-nsp
>> >>
>> >> *********************************
>> >> This message and any attachments (the "message") are confidential and
>> >> intended solely for the addressees.
>> >> Any unauthorised use or dissemination is prohibited.
>> >> Messages are susceptible to alteration.
>> >> France Telecom Group shall not be liable for the message if altered,
>> >> changed or falsified.
>> >> If you are not the intended addressee of this message, please cancel it
>> >> immediately and inform the sender.
>> >> ********************************
>> >>
>> >
>> > _________________________________________________________________
>> > Hotmail : une messagerie performante et gratuite avec une sécurité
>> > signée
>> > Microsoft
>> > https://signup.live.com/signup.aspx?id=60969
>> > _______________________________________________
>> > juniper-nsp mailing list juniper-nsp at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>> >
>>
>> --
>> Sent from my mobile device
>
> _________________________________________________________________
> Hotmail : une messagerie performante et gratuite avec une sécurité signée
> Microsoft
> https://signup.live.com/signup.aspx?id=60969
--
Sent from my mobile device
More information about the juniper-nsp
mailing list