Management
Highlighted
Management

MX - policer monitoring

[ Edited ]
‎09-19-2012 02:31 AM

Hi.

Guys, I need a help with my MX box.

 

We made some policers for specific traffic to limit it for example to 10Mb/s.

Now we want to import those policers to our mgmt systems to draw graphs about utilization of those policers.

Is it possible ?

 

I found jxFirewallMIB where I can find policers, and values like Bytes/Packets. But those values grows up only when policer make an action (for example discard), so we can import only values that exceed this policer. But from those values we cannot make an utilization per policer.

 

Sth very similar to Cisco's CBQoS.

 

Thanks in advance for any help.

Kind Regards.

Piotr.

2 REPLIES 2
Highlighted
Management

Re: MX - policer monitoring

‎09-19-2012 06:43 AM

 

Hi,

I think you can configure a firewall filter and call the policer inside the firewall filter term.

Also configure a counter inside the firewall term.

Apply the firewall filter to the interface.

 

Example.

 

admin# show firewall
family inet {
    filter test-fw {
        term 1 {
            then {
                policer testPolicer;
                count COUNT1;
                accept;
            }
        }
    }
}
policer testPolicer {
    if-exceeding {
        bandwidth-limit 2m;
        burst-size-limit 250k;
    }
    then discard;
}

 

admin# show interfaces lo0
unit 0 {
    family inet {
        filter {
            input test-fw;
        }
    }
}

 

 

 

You can read this counter value ( total  packets or Bytes) via SNMP. The below SNMP walk shows the counter value which I defined .  Your  management system should be able to calculate the rate of the packets / bytes per time interval.

 

admin# run show snmp mib walk 1.3.6.1.4.1.2636.3.5        
jnxFWFilter.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.67.79.85.78.84.49.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 = test-fw
jnxFWFilter.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.13.116.101.115.116.80.111.108.105.99.101.114.45.49.0.0.0.0.0.0.0.0.0.0 = test-fw
jnxFWCounter.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.67.79.85.78.84.49.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 = COUNT1
jnxFWCounter.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.13.116.101.115.116.80.111.108.105.99.101.114.45.49.0.0.0.0.0.0.0.0.0.0 = testPolicer-1
jnxFWType.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.67.79.85.78.84.49.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 = 2
jnxFWType.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.13.116.101.115.116.80.111.108.105.99.101.114.45.49.0.0.0.0.0.0.0.0.0.0 = 3
jnxFWPackets.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.67.79.85.78.84.49.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 = 5460
jnxFWPackets.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.13.116.101.115.116.80.111.108.105.99.101.114.45.49.0.0.0.0.0.0.0.0.0.0 = 0
jnxFWBytes.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.67.79.85.78.84.49.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 = 414514
jnxFWBytes.116.101.115.116.45.102.119.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.13.116.101.115.116.80.111.108.105.99.101.114.45.49.0.0.0.0.0.0.0.0.0.0 = 0
jnxFWCounterPacketCount.7.116.101.115.116.45.102.119.6.67.79.85.78.84.49.2 = 5460
jnxFWCounterPacketCount.7.116.101.115.116.45.102.119.13.116.101.115.116.80.111.108.105.99.101.114.45.49.3 = 0
jnxFWCounterPacketCount.23.95.95.100.101.102.97.117.108.116.95.97.114.112.95.112.111.108.105.99.101.114.95.95.23.95.95.100.101.102.97.117.108.116.95.97.114.112.95.112.111.108.105.99.101.114.95.95.3 = 0
jnxFWCounterPacketCount.24.116.101.115.116.80.111.108.105.99.101.114.45.101.109.48.46.48.45.105.110.101.116.45.105.24.116.101.115.116.80.111.108.105.99.101.114.45.101.109.48.46.48.45.105.110.101.116.45.105.3 = 0
jnxFWCounterPacketCount.24.116.101.115.116.80.111.108.105.99.101.114.45.101.109.48.46.48.45.105.110.101.116.45.111.24.116.101.115.116.80.111.108.105.99.101.114.45.101.109.48.46.48.45.105.110.101.116.45.111.3 = 0
jnxFWCounterByteCount.7.116.101.115.116.45.102.119.6.67.79.85.78.84.49.2 = 414514

 

 

Regards

Moses N

 

-------------------------------------------------------

If this post answers your question, please mark it as "Accepted Solution".
Kudos are a nice way of expressing your gratitude

Highlighted
Management

Re: MX - policer monitoring

‎10-03-2012 03:35 AM

Hello.

 

Yeah, I found it by myself at Juniper docs.

 

It`s been delivering me the stats I wants.

 

I need to export through snmp current rate at policer.

Example:

I have policer 2Mb/s.

Regular counters increments only if policer works. (drop packet).

I need stats than counter looks into.
We have traffic like 1Mb/s, and I need to export this 1Mb/s.

 

Anyway.

Thanks for help.

Feedback