Hello.
Running SRX1400 in Active/Passive cluster, 12.1X44-D45.
We configured rate limiting for inbound traffic on our 100Mbps link. The config took. Had to use simple-filter.
Does anyone know how to monitor if the policer is working or not?
'show policer...' produces no output
'show firewall...' produces no output
can't find any relevant option or stat within 'show interface...'
SRX1400> show configuration firewall family inet { simple-filter RATE-LIMIT { term 1 { from { destination-address 1.1.1.1/32; } then policer LIMIT-10Mbps; } term LAST { then accept; } } } policer LIMIT-10Mbps { if-exceeding { bandwidth-limit 10m; burst-size-limit 62500; } then discard; } SRX1400> show configuration interface reth0 { vlan-tagging; redundant-ether-options { redundancy-group 1; } unit 1111 { vlan-id 1111; family inet { simple-filter { input RATE-LIMIT; } address 2.2.2.2/30; } } }
Any tips/ideas welcome!!!
Thank you!
Sam