Junos OS

Hi,

I used the following config on Juniper MX 240 running JunOS 12.3R6.6:

show firewall family inet prefix-action 100m-per-source-24 
policer 100m;
count;
subnet-prefix-length 24;
destination-prefix-length 32;

show firewall policer 100m                                    
if-exceeding {
    bandwidth-limit 100m;
    burst-size-limit 1m;
}
then discard;

show firewall family inet filter regulator term prefix-action
from {
 destination-address {
 10.0.0.0/24;
 }
}
then {
 accept;
 prefix-action 100m-per-source-24;
}

show interfaces ae0 unit 199
vlan-id 199;
family inet {
 filter {
 output regulator;
 }
 address 10.0.0.1/24;
}

The config is commited but I cannot find any policers, the bandwidth limitation is also not working:

show firewall prefix-action-stats filter regulator prefix-action 100m-per-source-24

Filter: regulator

Is that a Junos Bug or what is wrong?

Greetings,

Freemind

Hello,

You have to remember that for "show" commands the prefix-action name has to be concatenated with term name, so in Your case use the following command:

show firewall prefix-action-stats filter regulator from 0 to 256 prefix-action 100m-per-source-24-prefix-action

 - where "100m-per-source-24-prefix-action" is a concatenation of Your PSA name "100m-per-source-24" and term name "prefix-action".

And Your BW limitation is not working because You specified too big burst size (1 million bytes), please configure burst-size 1500, re-test and report back.

HTH

Thanks
Alex

thanks alot, its working this way 🙂