Chris,
One way to do it is to mark in-contract traffic with
forwarding-class+"next-term" action, then match on this forwarding-class in
following FW filter term, count and accept.
You won't be able to do it on M10i with original CFEB, new I-chip based CFEB
is required.
Rgds
Alex
----- Original Message -----
From: "Chris Adams" <[email protected]>
To: <[email protected]>
Sent: Monday, May 04, 2009 5:13 PM
Subject: [j-nsp] Tracking traffic after policers?
I have an ethernet with a bunch of customer VLANs on an M10i. The
customers are limited to the bandwidth they pay for with policers. I
collect the traffic stats for graphing via SNMP, but the stats (from the
standard interface MIB) reflect the traffic before policing.
Is there a way to collect statistics _after_ policing (e.g. graph only
the traffic that is passed)? I see the JUNIPER-FIREWALL-MIB variable
jnxFWCounterByteCount, but it is always 0 for policers (only the packets
are counted, which isn't very useful for traffic stats).
I'm of course looking to do this with as simple a config as possible;
right now I can set a logical interface's rate with "set policer input
4meg output 4meg", with the 4meg policer only defined once.
--
Chris Adams <[email protected]>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
