[j-nsp] juniper-nsp Digest, Vol 123, Issue 17

Chris Gapske cgapske at paducahpower.com
Sun Feb 10 22:55:18 EST 2013


Anybody have a simple nat config for a m type router. 



Chris Gapske


Sent from my iPad
(Dreaming it was Honeycomb)

On Feb 10, 2013, at 11:04 AM, "juniper-nsp-request at puck.nether.net" <juniper-nsp-request at puck.nether.net> wrote:

> Send juniper-nsp mailing list submissions to
>    juniper-nsp at puck.nether.net
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>    https://puck.nether.net/mailman/listinfo/juniper-nsp
> or, via email, send a message with subject or body 'help' to
>    juniper-nsp-request at puck.nether.net
> 
> You can reach the person managing the list at
>    juniper-nsp-owner at puck.nether.net
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of juniper-nsp digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: Command to see multicast packet size (Antonio Sanchez-Monge)
>   2. Re: Command to see multicast packet size (Antonio Sanchez-Monge)
>   3. Re: Command to see multicast packet size
>      (Goodwin, Mark (CCI-Atlanta))
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Sat, 9 Feb 2013 21:37:22 +0000
> From: Antonio Sanchez-Monge <amonge at juniper.net>
> To: Riccardo S <dim0sal at hotmail.com>
> Cc: "<juniper-nsp at puck.nether.net>" <juniper-nsp at puck.nether.net>
> Subject: Re: [j-nsp] Command to see multicast packet size
> Message-ID:
>    <D9BE964F28769449AD26C204DD11FE111AAF12EE at BN1PRD0512MB604.namprd05.prod.outlook.com>
>    
> Content-Type: text/plain; charset="us-ascii"
> 
> Hi Riccardo,
> 
> It's not exactly an ACL with logging... it's an ACL with counting.
> 
> Thanks,
> Ato
> 
> 
> On Feb 8, 2013, at 3:54 PM, Riccardo S wrote:
> 
> ok this is not exactly the same as in IOS, this is an ACL with logging....
> 
> hence not so immediate for any mcast flow...
> 
> Any other idea ?
> 
> Tks
> 
> ________________________________
> From: amonge at juniper.net<mailto:amonge at juniper.net>
> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> Date: Fri, 8 Feb 2013 14:48:02 +0000
> 
> You probably need a filter like this:
> 
> 
> 
> configure
> set firewall family inet filter myFilter term myFlow from source-address 1.2.3.4/32
> set firewall family inet filter myFilter term myFlow from source-address 224.1.2.3/32
> set firewall family inet filter myFilter term myFlow then count myFlowCount
> set firewall family inet filter myFilter term myFlow then accept
> set firewall family inet filter myFilter term Rest then accept
> set forwarding-options family inet filter input myFilter
> commit and-quit
> 
> 
> 
> show firewall filter myFilter
> 
> 
> 
> 
> 
> From: Riccardo S [mailto:dim0sal at hotmail.com]
> Sent: Friday, February 08, 2013 3:42 PM
> To: Antonio Sanchez-Monge; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> 
> 
> 
> Hi
> I saw it but no info is found related to the average pkt size...
> 
>> show multicast route extensive group 224.1.2.3
> Group: 224.1.2.3
>    Source: 1.2.3.4/32
>    Upstream interface: ae0.811
>    Downstream interface list:
>        gr-1/1/0.1245
>    Session description: Unknown
>    Statistics: 0 kBps, 1 pps, 35231 packets
>    Next-hop ID: 1048577
>    Upstream protocol: PIM
>    Route state: Active
>    Forwarding state: Forwarding
>    Cache lifetime/timeout: 360 seconds
>    Wrong incoming interface notifications: 0
>    Uptime: 09:40:25
> 
> Tks
> 
>> From: amonge at juniper.net<mailto:amonge at juniper.net>
>> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: RE: [j-nsp] Command to see multicast packet size
>> Date: Fri, 8 Feb 2013 14:35:36 +0000
>> 
>> Hi,
>> 
>> show multicast route extensive
>> 
>> Ato
>> -----Original Message-----
>> From: juniper-nsp-bounces at puck.nether.net<mailto:juniper-nsp-bounces at puck.nether.net> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Riccardo S
>> Sent: Friday, February 08, 2013 3:33 PM
>> To: juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: [j-nsp] Command to see multicast packet size
>> 
>> 
>> Hi
>> is there in Junos the equivalent command as in IOS:
>> 
>> show ip mroute x.x.x.x count
>> 
>> where you can see the packet size of the flow ?
>> 
>> 
>> Example
>> 
>> #sh ip mroute 224.1.2.3 count
>> IP Multicast Statistics
>> 1004 routes using 445962 bytes of memory
>> 152 groups, 5.60 average sources per group Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)
>> 
>> Group: 224.1.2.3, Source count: 1, Packets forwarded: 34050, Packets received: 34050
>> RP-tree: Forwarding: 2/0/36/0, Other: 2/0/0
>> Source: 1.2.3.4/32, Forwarding: 34048/1/53/0, Other: 34048/0/0
>> 
>> Thanks
>> 
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Sat, 9 Feb 2013 21:56:39 +0000
> From: Antonio Sanchez-Monge <amonge at juniper.net>
> To: Riccardo S <dim0sal at hotmail.com>
> Cc: "<juniper-nsp at puck.nether.net>" <juniper-nsp at puck.nether.net>
> Subject: Re: [j-nsp] Command to see multicast packet size
> Message-ID:
>    <D9BE964F28769449AD26C204DD11FE111AAF1367 at BN1PRD0512MB604.namprd05.prod.outlook.com>
>    
> Content-Type: text/plain; charset="us-ascii"
> 
> I think there is an (unsupported) way to pull directly that info. If you send me the output of:
> 
> show route forwarding-table multicast destination <your_group_address> extensive
> show chassis fpc pic-status
> 
> I can tell you the next steps.
> 
> On Feb 8, 2013, at 3:54 PM, Riccardo S wrote:
> 
> ok this is not exactly the same as in IOS, this is an ACL with logging....
> 
> hence not so immediate for any mcast flow...
> 
> Any other idea ?
> 
> Tks
> 
> ________________________________
> From: amonge at juniper.net<mailto:amonge at juniper.net>
> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> Date: Fri, 8 Feb 2013 14:48:02 +0000
> 
> You probably need a filter like this:
> 
> 
> 
> configure
> set firewall family inet filter myFilter term myFlow from source-address 1.2.3.4/32
> set firewall family inet filter myFilter term myFlow from source-address 224.1.2.3/32
> set firewall family inet filter myFilter term myFlow then count myFlowCount
> set firewall family inet filter myFilter term myFlow then accept
> set firewall family inet filter myFilter term Rest then accept
> set forwarding-options family inet filter input myFilter
> commit and-quit
> 
> 
> 
> show firewall filter myFilter
> 
> 
> 
> 
> 
> From: Riccardo S [mailto:dim0sal at hotmail.com]
> Sent: Friday, February 08, 2013 3:42 PM
> To: Antonio Sanchez-Monge; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> 
> 
> 
> Hi
> I saw it but no info is found related to the average pkt size...
> 
>> show multicast route extensive group 224.1.2.3
> Group: 224.1.2.3
>    Source: 1.2.3.4/32
>    Upstream interface: ae0.811
>    Downstream interface list:
>        gr-1/1/0.1245
>    Session description: Unknown
>    Statistics: 0 kBps, 1 pps, 35231 packets
>    Next-hop ID: 1048577
>    Upstream protocol: PIM
>    Route state: Active
>    Forwarding state: Forwarding
>    Cache lifetime/timeout: 360 seconds
>    Wrong incoming interface notifications: 0
>    Uptime: 09:40:25
> 
> Tks
> 
>> From: amonge at juniper.net<mailto:amonge at juniper.net>
>> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: RE: [j-nsp] Command to see multicast packet size
>> Date: Fri, 8 Feb 2013 14:35:36 +0000
>> 
>> Hi,
>> 
>> show multicast route extensive
>> 
>> Ato
>> -----Original Message-----
>> From: juniper-nsp-bounces at puck.nether.net<mailto:juniper-nsp-bounces at puck.nether.net> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Riccardo S
>> Sent: Friday, February 08, 2013 3:33 PM
>> To: juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: [j-nsp] Command to see multicast packet size
>> 
>> 
>> Hi
>> is there in Junos the equivalent command as in IOS:
>> 
>> show ip mroute x.x.x.x count
>> 
>> where you can see the packet size of the flow ?
>> 
>> 
>> Example
>> 
>> #sh ip mroute 224.1.2.3 count
>> IP Multicast Statistics
>> 1004 routes using 445962 bytes of memory
>> 152 groups, 5.60 average sources per group Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)
>> 
>> Group: 224.1.2.3, Source count: 1, Packets forwarded: 34050, Packets received: 34050
>> RP-tree: Forwarding: 2/0/36/0, Other: 2/0/0
>> Source: 1.2.3.4/32, Forwarding: 34048/1/53/0, Other: 34048/0/0
>> 
>> Thanks
>> 
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Sat, 9 Feb 2013 17:42:14 -0500
> From: "Goodwin, Mark (CCI-Atlanta)" <Mark.Goodwin at cox.com>
> To: "dim0sal at hotmail.com" <dim0sal at hotmail.com>, "amonge at juniper.net"
>    <amonge at juniper.net>
> Cc: "juniper-nsp at puck.nether.net" <juniper-nsp at puck.nether.net>
> Subject: Re: [j-nsp] Command to see multicast packet size
> Message-ID:
>    <D7379971DE4E38469C116AB7AC88D07D0306941A1E at CATL0MS108.corp.cox.com>
> Content-Type: text/plain; charset="us-ascii"
> 
> 
> 
> Sent from my Android phone using TouchDown (www.nitrodesk.com)
> 
> -----Original Message-----
> From: Antonio Sanchez-Monge [amonge at juniper.net]
> Received: Saturday, 09 Feb 2013, 5:11pm
> To: Riccardo S [dim0sal at hotmail.com]
> CC: {juniper-nsp at puck.nether.net} [juniper-nsp at puck.nether.net]
> Subject: Re: [j-nsp] Command to see multicast packet size
> 
> I think there is an (unsupported) way to pull directly that info. If you send me the output of:
> 
> show route forwarding-table multicast destination <your_group_address> extensive
> show chassis fpc pic-status
> 
> I can tell you the next steps.
> 
> On Feb 8, 2013, at 3:54 PM, Riccardo S wrote:
> 
> ok this is not exactly the same as in IOS, this is an ACL with logging....
> 
> hence not so immediate for any mcast flow...
> 
> Any other idea ?
> 
> Tks
> 
> ________________________________
> From: amonge at juniper.net<mailto:amonge at juniper.net>
> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> Date: Fri, 8 Feb 2013 14:48:02 +0000
> 
> You probably need a filter like this:
> 
> 
> 
> configure
> set firewall family inet filter myFilter term myFlow from source-address 1.2.3.4/32
> set firewall family inet filter myFilter term myFlow from source-address 224.1.2.3/32
> set firewall family inet filter myFilter term myFlow then count myFlowCount
> set firewall family inet filter myFilter term myFlow then accept
> set firewall family inet filter myFilter term Rest then accept
> set forwarding-options family inet filter input myFilter
> commit and-quit
> 
> 
> 
> show firewall filter myFilter
> 
> 
> 
> 
> 
> From: Riccardo S [mailto:dim0sal at hotmail.com]
> Sent: Friday, February 08, 2013 3:42 PM
> To: Antonio Sanchez-Monge; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
> Subject: RE: [j-nsp] Command to see multicast packet size
> 
> 
> 
> Hi
> I saw it but no info is found related to the average pkt size...
> 
>> show multicast route extensive group 224.1.2.3
> Group: 224.1.2.3
>    Source: 1.2.3.4/32
>    Upstream interface: ae0.811
>    Downstream interface list:
>        gr-1/1/0.1245
>    Session description: Unknown
>    Statistics: 0 kBps, 1 pps, 35231 packets
>    Next-hop ID: 1048577
>    Upstream protocol: PIM
>    Route state: Active
>    Forwarding state: Forwarding
>    Cache lifetime/timeout: 360 seconds
>    Wrong incoming interface notifications: 0
>    Uptime: 09:40:25
> 
> Tks
> 
>> From: amonge at juniper.net<mailto:amonge at juniper.net>
>> To: dim0sal at hotmail.com<mailto:dim0sal at hotmail.com>; juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: RE: [j-nsp] Command to see multicast packet size
>> Date: Fri, 8 Feb 2013 14:35:36 +0000
>> 
>> Hi,
>> 
>> show multicast route extensive
>> 
>> Ato
>> -----Original Message-----
>> From: juniper-nsp-bounces at puck.nether.net<mailto:juniper-nsp-bounces at puck.nether.net> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Riccardo S
>> Sent: Friday, February 08, 2013 3:33 PM
>> To: juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
>> Subject: [j-nsp] Command to see multicast packet size
>> 
>> 
>> Hi
>> is there in Junos the equivalent command as in IOS:
>> 
>> show ip mroute x.x.x.x count
>> 
>> where you can see the packet size of the flow ?
>> 
>> 
>> Example
>> 
>> #sh ip mroute 224.1.2.3 count
>> IP Multicast Statistics
>> 1004 routes using 445962 bytes of memory
>> 152 groups, 5.60 average sources per group Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)
>> 
>> Group: 224.1.2.3, Source count: 1, Packets forwarded: 34050, Packets received: 34050
>> RP-tree: Forwarding: 2/0/36/0, Other: 2/0/0
>> Source: 1.2.3.4/32, Forwarding: 34048/1/53/0, Other: 34048/0/0
>> 
>> Thanks
>> 
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> 
> ------------------------------
> 
> _______________________________________________
> juniper-nsp mailing list
> juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> End of juniper-nsp Digest, Vol 123, Issue 17
> ********************************************
> 
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________



More information about the juniper-nsp mailing list