Junos OS

Hi Experts, 

I configured a sub interface with vlan-tag / family etc. When I try to check __default_arp_policer__ is applied on this interface or not. I executed show interface extensive command but to policer is not getting displayed in output which is as shown below.

Logical interface ge-1/1/0.313 (Index 91) (SNMP ifIndex 576) (Generation 171)
Flags: Device-Down SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.313 ] Encapsulation: ENET2
Traffic statistics:
Input bytes : 0
Output bytes : 0
Input packets: 0
Output packets: 0
Local statistics:
Input bytes : 0
Output bytes : 0
Input packets: 0
Output packets: 0
Transit statistics:
Input bytes : 0 0 bps
Output bytes : 0 0 bps
Input packets: 0 0 pps
Output packets: 0 0 pps
Protocol inet, MTU: 1500, Generation: 218, Route table: 13
Flags: Sendbcast-pkt-to-re, Is-Primary
Addresses, Flags: Dest-route-down Is-Default Is-Preferred Is-Primary
Destination: 10.129.34.8/30, Local: 10.129.34.9, Broadcast: 10.129.34.11, Generation: 176

Am I missing something here ? I did verify from vty that default_arp_policer is present there

admin@RT01> start shell
% vty CFEB0

CSBR platform (266Mhz PPC 603e processor, 128MB memory, 512KB flash)

CSBR0(CIBA-JPE-RT01 vty)# show filter index 17000 program
Program Filters:
---------------
Index Dir Cnt Text Bss Name
-------- ------ ------ ------ ------ --------
17000 52 0 4 4 __default_arp_policer__

Firewall program version 50 magic fed2beef
Name: "__default_arp_policer__" Protocol: ip
Implicit Filter: No
Hash: a1a7bb310f81bd7d40582ee7c5ce0e69
Action directory: 1 entry (52 bytes)
Policer directory: 1 entry (176 bytes)
Text: 1 instruction word (4 bytes)
BSS: 5 next hop words (20 bytes)
Action directory: 1 entry (52 bytes)
0: accept policer 0
-> 0:
Policer directory: 1 entry (176 bytes)
0: Policer name "__default_arp_policer__": 1 reference
Bandwidth Limit: 18750 bytes/sec.
Burst Size: 15000 bytes.
discard
Program instructions: 1 word

0: terminate -> action index 0

FPC/PIC details :

FPC 1 E-FPC
PIC 1 REV 07 750-010238 CN0690 1x G/E SFP, 1000 BASE

Your help would be greaty appreciated.

Thanks !

BR//

Hardik

Hello,

Please try following command

aarseniev@mx480-re0> show interfaces policers ge-2/2/1 
Interface       Admin Link Proto Input Policer         Output Policer
ge-2/2/1        up    up  
ge-2/2/1.1001   up    up        
                           inet 
                           multiservice __default_arp_policer__
Interface       Admin Link Proto Input Policer         Output Policer
ge-2/2/1.32767  up    up        
                           multiservice __default_arp_policer__

 HTH

Thanks

Alex

Hi Alex,

Its not showing in the mentioned command as well.

admin@CIBA-JPE-RT01> show interfaces policers ge-1/1/0.313
Interface Admin Link Proto Input Policer Output Policer
ge-1/1/0.313 up up
inet
mpls

BR//

Hardik

Hi,

It looks like you are doing it on M7i/M10i router. In this case, please use following command from CSBR vty to verify that ARP policer is attached to an interface:

CSBR0(m10i vty)# show topology filter index 17000
Topology: dfw(__default_arp_policer__)
  Flavor: policer (15), Refcount 1, Flags 0x1
  Addr: 0x196a34c, Next: 0xbe6c4c, Context 0x196a320
    Link 0: 00266840, Offset 8, Next: 00160a00

Topology Neighbors:
  ge-1/0/3(ih-iff.1001)-> dfw(__default_arp_policer__)-> rtt(ARP,0)

Topology: dfw(__default_arp_policer__)
  Flavor: policer (15), Refcount 1, Flags 0x1
  Addr: 0x1974d04, Next: 0xbe6c4c, Context 0x1974cd8
    Link 0: 0026b040, Offset 8, Next: 00160a00

Topology Neighbors:
  fe-1/1/0(ih-iff.0)-> dfw(__default_arp_policer__)-> rtt(ARP,0)


CSBR0(m10i vty)# exit   

 HTH

Rgds

Alex

Hi Alex,

Thanks a lot for clarification that M7i/10i do not show up default ARP policer in show interface extensive command.

BR//

Hardik