On Feb 25, 2009, at 9:34 PM, Stefan Fouant wrote:
I'd like to tragger some sort of alert when the traffic exceeds my
policer configuration and packets start being discarded.  I looked
through JUNIPER-FIREWALL-MIB and didn't see anything along the lines
of what I'm looking for.

Anyone else implement anything along similar lines?

have a look at enterprises .juniperMIB .jnxMibs.jnxFirewalls.jnxFirewallCounterTable.jnxFirewallCounterEntry (1.3.6.1.4.1.2636.3.5.2)

E.g.:

[email protected]> show configuration interfaces xe-1/0/0.189 family inet policer
input po-xe-1/0/0.189;

[email protected]> show policer | match po-xe-1/0/0.189
po-xe-1/0/0.189-xe-1/0/0.189-log_int-i               170604

using SNMP:

jnxFWCounterDisplayFilterName. 38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.3 = po-xe-1/0/0.189-xe-1/0/0.189-log_int-i

jnxFWCounterDisplayName. 38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.3 = po-xe-1/0/0.189-xe-1/0/0.189-log_int-i

jnxFWCounterPacketCount. 38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.38.112.111.45.120.101.45.49.47.48.47.48.46.49.56.57.45.120.101.45.49.47.48.47.48.46.49.56.57.45.108.111.103.95.105.110.116.45.105.3 = 170604

Works like a charm.

   --Daniel.

_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to