Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

monitor policer stats in SRX1400, 12.1X44 using simple-filter

$
0
0

Hello.

 

Running SRX1400 in Active/Passive cluster, 12.1X44-D45.

 

We configured rate limiting for inbound traffic on our 100Mbps link.  The config took.   Had to use simple-filter.

 

Does anyone know how to monitor if the policer is working or not?

 

'show policer...' produces no output

'show firewall...' produces no output

can't find any relevant option or stat within 'show interface...'

 

 

SRX1400> show configuration firewall
family inet {
    simple-filter RATE-LIMIT {
        term 1 {
            from {
                destination-address 1.1.1.1/32;
            }
            then policer LIMIT-10Mbps;
        }
        term LAST {
            then accept;
        }
    }
}
policer LIMIT-10Mbps {
    if-exceeding {
        bandwidth-limit 10m;
        burst-size-limit 62500;
    }
    then discard;
}

SRX1400> show configuration interface
reth0 {
    vlan-tagging;
    redundant-ether-options {
        redundancy-group 1;
    }
    unit 1111 {
        vlan-id 1111;
        family inet {
            simple-filter {
                input RATE-LIMIT;
            }
            address 2.2.2.2/30;
        }
    }
}

 

 

Any tips/ideas welcome!!!

 

 

Thank you!

Sam


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>