Mailing List Archive

policer monitoring
Hi all,

We have implemented rate-limit on particular IP address using CAR on juniper M-5.We are unable see real time usage i.e INPUT, OUTPUT & exceeding bandwidth.
We have tried COUNT command but that only tells total byte transferred.How can I achive this on Juniper Box.

Ajay Bhardwaj

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://puck.nether.net/pipermail/juniper-nsp/attachments/20030211/25b29439/attachment.htm
policer monitoring [ In reply to ]
Ajay - FYI - CAR is a Cisco term. On Juniper, we call it 'rate-limiting' or
'policing' of traffic flows.

To see what you want... use the 'monitor interface interface-name' command:

You may nee to execute the following command first to set your terminal type.

bob@M10> set cli term vt100

Then..

bob@M10> monitor interface so-0/0/0

M10 Seconds: 19 Time: 15:46:29
Interface: so-0/0/0, Enabled, Link is Up
Encapsulation: PPP, Keepalives, Speed: OC48
Traffic statistics: Current Delta
Input packets: 6045 (0 pps) [11] <------- Here are your real time usage counters.
Input bytes: 6290065 (0 bps) [13882] Updated once each second.
Output packets: 10376 (0 pps) [10]
Output bytes: 10365540 (0 bps) [9418]
Encapsulation statistics:
Input keepalives: 1901 [2]
Output keepalives: 1901 [2]
NCP state: Opened
LCP state: Opened
Error statistics:
Input errors: 0 [0]
Input drops: 0 [0]
Input framing errors: 0 [0]
Policed discards: 0 [0]
L3 incompletes: 0 [0]
L2 channel errors: 0 [0]
L2 mismatch timeouts: 0 [0]
Carrier transitions: 1 [0]
Output errors: 0 [0]
Output drops: 0 [0]
Aged packets: 0 [0]
Active alarms : None
Active defects: None
SONET error counts/seconds:
LOS count 1 [0]
LOF count 1 [0]
SEF count 1 [0]
ES-S 0 [0]
SES-S 0 [0]
SONET statistics:
BIP-B1 458871 [0]
BIP-B2 460072 [0]
REI-L 465610 [0]
BIP-B3 458978 [0]
REI-P 458773 [0]
Received SONET overhead:
F1 : 0x00 J0 : 0x00 K1 : 0x00
K2 : 0x00 S1 : 0x00 C2 : 0x00
C2(cmp) : 0x00 F2 : 0x00 Z3 : 0x00
Z4 : 0x00 S1(cmp) : 0x00
Transmitted SONET overhead:
F1 : 0x00 J0 : 0x01 K1 : 0x00
K2 : 0x00 S1 : 0x00 C2 : 0xcf
F2 : 0x00 Z3 : 0x00 Z4 : 0x00
Next='n', Quit='q' or ESC, Freeze='f', Thaw='t', Clear='c', Interface='i'

Thanks,

Bob O'Hara

Systems Engineer

Juniper Networks - 'Every Bit IP'

...........................................
. Email: rohara@juniper.net .
. Web: http://www.juniper.net .
...........................................

-----Original Message-----
From: Ajay Bhardwaj [mailto:ajay.bhardwaj@in.spectranet.com]
Sent: Tuesday, February 11, 2003 2:38 AM
To: juniper-nsp@puck.nether.net
Subject: [j-nsp] policer monitoring


Hi all,

We have implemented rate-limit on particular IP address using CAR on juniper M-5.We are unable see real time usage i.e INPUT, OUTPUT & exceeding bandwidth.
We have tried COUNT command but that only tells total byte transferred.How can I achive this on Juniper Box.

Ajay Bhardwaj
policer monitoring [ In reply to ]
Hi Ajay

You can use the command

show firewall filter <filter-name>

This will show you counters under your filter. So you
can count the traffic which is below your number under
a different counter and exceeding traffic in different
counter.

If you want to do it using SNMP, Juniper also has a
firewall MIB that will give you access to these
counters from SNMP. You can use something like MRTG
and plot the information.

Hope that helps.

Rgds
AMS

--- Ajay Bhardwaj <ajay.bhardwaj@in.spectranet.com>
wrote:
> Hi all,
>
> We have implemented rate-limit on particular IP
> address using CAR on juniper M-5.We are unable see
> real time usage i.e INPUT, OUTPUT & exceeding
> bandwidth.
> We have tried COUNT command but that only tells
> total byte transferred.How can I achive this on
> Juniper Box.
>
> Ajay Bhardwaj
>
> > _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
>


__________________________________________________
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com