Juniper EX9200 Features Manual page 124

Traffic Policers Feature Guide for EX9200 Switches
Verification
Purpose
Action
Purpose
Action
106
Confirm that the configuration is working properly.
Displaying the Firewall Filters Applied to an Interface on page 106
Displaying Prefix-Specific Actions Statistics for the Firewall Filter on page 106
Displaying the Firewall Filters Applied to an Interface
Verify that the firewall filter
logical interface
so-0/0/2.0
Use the
show interfaces statistics
, and include the
so-0/0/2.0
the Input Filters field displays limit-source-one-24, indicating that the filter is applied
to IPv4 traffic in the input direction:
user@host> show interfaces statistics so-0/0/2.0 detail
Logical interface so-0/0/2.0 (Index 79) (SNMP ifIndex 510) (Generation 149)
Flags: Hardware-Down Point-To-Point SNMP-Traps 0x4000 Encapsulation: PPP
Protocol inet, MTU: 4470, Generation: 173, Route table: 0
Flags: Sendbcast-pkt-to-re, Protocol-Down
Input Filters: limit-source-one-24
Addresses, Flags: Dest-route-down Is-Preferred Is-Primary
Destination: 10.39/16, Local: 10.39.1.1, Broadcast: 10.39.255.255,
Generation: 163
Displaying Prefix-Specific Actions Statistics for the Firewall Filter
Verify the number of packets evaluated by the policer.
Use the show firewall prefix-action-stats
mode command to display statistics about a prefix-specific action configured on a firewall
filter.
As an option, you can use the
starting and ending counter or policer to be displayed. A policer set is indexed from 0
through 65535.
The command output displays the specified filter name followed by a listing of the number
of bytes and packets processed by each policer in the policer set.
For a term-specific policer, each policer in the set is identified as follows:
prefix-specific-action-name-term-name-set-index
For a filter-specific policer, each policer is identified in the command output as follows:
prefix-specific-action-name-set-index
Because the example prefix-specific action
by only one term of the example filter
is configured as term-specific. In the
1Mbps-policer
command output, the policer statistics are displayed as
is applied to the IPv4 input traffic at
limit-source-one-24
.
operational mode command for logical interface
option. In the command output section for Protocol inet,
detail
filter filter-name prefix-action name
from set-index to set-index
psa-1Mbps-per-source-24-32-256
limit-source-one-24
show firewall prefix-action-stats
operational
command option to specify the
is referenced
, the example policer
Copyright © 2016, Juniper Networks, Inc.