Routing

Hi All, If I had "another" vendor's PE router connected to a Juniper MX960 and I wanted to see the TCF (EXP) markings/values in the incoming MPLS headers on the Juniper's interface (the interface connected to the PE) what would be the JunoS command that would allow me to see this? TIA

Hi Folks,

Just my 2 cents on this….

 

If you want to troubleshoot based on EXP values marked by your peer; I would suggest to configure a firewall mpls filter to count EXP tagged packets and apply to input direction on the Core facing interface.

 

set firewall family mpls filter interface_in term a from exp 7

set firewall family mpls filter interface_in term a then count exp7

set firewall family mpls filter interface_in term a then accept

set firewall family mpls filter interface_in term b from exp 6

set firewall family mpls filter interface_in term b then count exp6

set firewall family mpls filter interface_in term b then accept

set firewall family mpls filter interface_in term c from exp 5

set firewall family mpls filter interface_in term c then count exp5

set firewall family mpls filter interface_in term c then accept

set firewall family mpls filter interface_in term d from exp 4

set firewall family mpls filter interface_in term d then count exp4

set firewall family mpls filter interface_in term d then accept

set firewall family mpls filter interface_in term e from exp 3

set firewall family mpls filter interface_in term e then count exp3

set firewall family mpls filter interface_in term e then accept

set firewall family mpls filter interface_in term f from exp 2

set firewall family mpls filter interface_in term f then count exp2

set firewall family mpls filter interface_in term f then accept

set firewall family mpls filter interface_in term g from exp 1

set firewall family mpls filter interface_in term g then count exp1

set firewall family mpls filter interface_in term g then accept

set firewall family mpls filter interface_in term h from exp 0

set firewall family mpls filter interface_in term h then count exp0

set firewall family mpls filter interface_in term h then accept

set firewall family mpls filter interface_in term i then accept

 

Many thanks for the rapid response Python - that looks just the job! So, after I've applied this input firewall filter to the appropriate interface what would be the command to see the results (i.e. the "count" values)? I'm guessing it'll look something like this: show firewall counter exp(n) filter interface-in (where n = a value from 0 to 7) Would that be correct? TIA

Hi Folks,

Please find the process,

 

To Apply,

 

labroot@re0_re0:pe1> show configuration interfaces

ge-0/0/0 {

    unit 23 {

        vlan-id 23;

        family inet {

            address 1.1.23.1/30;

        }

        family mpls {

            filter {

                input interface_in;

            }

        }

    }

}

 

To check,

 

labroot@re0_re0:pe1> show firewall filter interface_in      

 

Filter: __pe1/interface_in                                    

Counters:

Name                                                Bytes              Packets

exp0                                                    0                    0

exp1                                                    0                    0

exp2                                                    0                    0

exp3                                                    0                    0

exp4                                                    0                    0

exp5                                                    0                    0

exp6                                                    0                    0

exp7                                                    0                    0

 

labroot@re0_re0:pe1>