Prefix-Specific Counting And Policing Configuration Scenarios; Table 9: Summary Of Prefix-Specific Action Scenarios - Juniper EX9200 Features Manual

Related
Documentation

Prefix-Specific Counting and Policing Configuration Scenarios

Prefix Length of the Action and Prefix Length of Addresses in Filtered Packets
Copyright © 2016, Juniper Networks, Inc.
psa-1Mbps-per-source-24-32-256-one-0
so on through
psa-1Mbps-per-source-24-32-256-one-255
user@host> show firewall prefix-action-stats filter limit-source-one-24 prefix-action
psa-1Mbps-per-source-24-32-256 from 0 to 9
Filter: limit-source-one-24
Counters:
Name
psa-1Mbps-per-source-24-32-256-one-0
psa-1Mbps-per-source-24-32-256-one-1
psa-1Mbps-per-source-24-32-256-one-2
psa-1Mbps-per-source-24-32-256-one-3
psa-1Mbps-per-source-24-32-256-one-4
psa-1Mbps-per-source-24-32-256-one-5
psa-1Mbps-per-source-24-32-256-one-6
psa-1Mbps-per-source-24-32-256-one-7
psa-1Mbps-per-source-24-32-256-one-8
psa-1Mbps-per-source-24-32-256-one-9
Two-Color Policer Configuration Overview on page 49
Prefix-Specific Counting and Policing Overview on page 97
Filter-Specific Counter and Policer Set Overview on page 100
Prefix-Specific Counting and Policing Configuration Scenarios on page 107
This topic covers the following information:
Prefix Length of the Action and Prefix Length of Addresses in Filtered Packets on page 107
Scenario 1: Firewall Filter Term Matches on Multiple Addresses on page 109
Scenario 2: Subnet Prefix Is Longer Than the Prefix in the Filter Match
Condition on page 110
Scenario 3: Subnet Prefix Is Shorter Than the Prefix in the Firewall Filter Match
Condition on page 111
Table 9 on page 107 describes the relationship between the prefix length specified in the
prefix-specific action and the prefix length of the addresses matched by the firewall filter
term that references the prefix-specific action.

Table 9: Summary of Prefix-Specific Action Scenarios

Counter and Policer Set
Prefix-specific action scenario:
"Example: Configuring Prefix-Specific Counting and Policing" on page 100
source-prefix-length = 32
subnet-prefix-length = 24
Set size: 2^8 = 256
Chapter 10: Prefix-Specific Counting and Policing Actions
,
psa-1Mbps-per-source-24-32-256-one-1
Packet-Filtering Criteria
source-address = 10.10.10.0/24
, and
.
Bytes Packets
0 0
0 0
0 0
0 0
0 0
0 0
0 0
0 0
0 0
0 0
Indexing of Instances
Instance 0 10.10.10.0
Instance 1: 10.10.10.1
107