Juniper EX9200 Features Manual page 210

Traffic Policers Feature Guide for EX9200 Switches
Verification
Purpose
Action
Purpose
Action
Related
Documentation
192
Confirm that the configuration is working properly.
Displaying the Firewall Filters Applied to an Interface on page 192
Displaying the Number of Packets Processed by the Policer at the Logical
Interface on page 192
Displaying the Firewall Filters Applied to an Interface
Verify that the firewall filter
.
so-1/0/0.0
Use the
show interfaces statistics
, and include the
so-1/0/0.0
output, the Input Filters field shows that the firewall filter
input direction.
user@host> show interfaces statistics so-1/0/0 detail
Logical interface so-1/0/0.0 (Index 79) (SNMP ifIndex 510) (Generation 149)
Flags: Hardware-Down Point-To-Point SNMP-Traps 0x4000 Encapsulation: PPP
Protocol inet, MTU: 4470, Generation: 173, Route table: 0
Flags: Sendbcast-pkt-to-re, Protocol-Down
Input Filters: ipv4-filter
Addresses, Flags: Dest-route-down Is-Preferred Is-Primary
Destination: 10.39/16, Local: 10.39.1.1, Broadcast: 10.39.255.255,
Generation: 163
Displaying the Number of Packets Processed by the Policer at the Logical Interface
Verify the traffic flow through the logical interface and that the policer is evaluated when
packets are received on the logical interface.
Use the operational mode command for the filter you applied to the logical
show firewall
interface.
user@host> show firewall filter ipv4-filter
Filter: ipv4-filter
Policers:
Name
shared-policer-A-tcp-police-1
shared-policer-A-tcp-police-2
The command output displays the name of policer (
filter term ( ) under which the policer action is specified, and the number of packets
police-1
that matched the filter term. This is only the number of out-of-specification (out-of-spec)
packet counts, not all packets policed by the policer.
Firewall Filter Match Conditions Based on Numbers or Text Aliases
Firewall Filter Match Conditions Based on Bit-Field Values
Firewall Filter Match Conditions Based on Address Fields
is applied to the IPv4 input traffic at logical interface
ipv4-filter
operational mode command for logical interface
option. In the Protocol inet section of the command
detail
shared-policer-A
ipv4-filter is applied in the
Packets
32863
3870
), the name of the
Copyright © 2016, Juniper Networks, Inc.