Juniper EX9200 Features Manual page 81

Traffic policers feature guide ex series
Hide thumbs Also See for EX9200:
Table of Contents

Advertisement

Verification
Purpose
Action
Purpose
Action
Copyright © 2016, Juniper Networks, Inc.
user@R2# show protocols ospf
area 0.0.0.0 {
interface ge-2/0/7.0 {
passive;
}
interface lo0.0 {
passive;
}
interface ge-2/0/8.0;
}
If you are done configuring Device R2, enter
Confirm that the configuration is working properly.
Clearing the Counters on page 63
Sending TCP Traffic into the Network and Monitoring the Discards on page 63
Clearing the Counters
Confirm that the firewall counters are cleared.
On Device R1, run the
clear firewall all
user@R1> clear firewall all
Sending TCP Traffic into the Network and Monitoring the Discards
Make sure that the traffic of interest that is sent is rate-limited on the input interface
(ge-2/0/5).
Use a traffic generator to send 10 TCP packets with a source port of 80.
1.
The -s flag sets the source port. The -k flag causes the source port to remain steady
at 80 instead of incrementing. The -c flag sets the number of packets to 10. The -d
flag sets the packet size.
The destination IP address of 172.16.80.1 belongs to Device Host 2 that is connected
to Device R2. The user on Device Host 2 has requested a webpage from Device Host
1 (the webserver emulated by the traffic generator on Device Host 1). The packets
that being rate-limited are sent from Device Host 1 in response to the request from
Device Host 2.
NOTE:
In this example the policer numbers are reduced to a bandwidth
limit of 8 Kbps and a burst size limit of 1500 KBps to ensure that some
packets are dropped during this test.
[root@host]# hping 172.16.80.1 -c 10 -s 80 -k -d 300
Chapter 7: Basic Single-Rate Two-Color Policers
commit
from configuration mode.
command to reset the firewall counters to 0.
63

Advertisement

Table of Contents
loading

Table of Contents