Screen OS

Hi Guys;

Could someone tell me why I'm getting all zeros in the Interface bandwidth output in my SSGs ?? I'm pretty sure that an important amount of traffic is passing through these firewalls.

Set_HA:SetFW_CH_01(M)-> get int

A - Active, I - Inactive, U - Up, D - Down, R - Ready

Interfaces in vsys Root:
Name           IP Address                        Zone        MAC            VLAN State VSD
eth0/0         0.0.0.0/0                         HA          0021.5912.f600    -   U   -
eth0/1         0.0.0.0/0                         Null        0010.dbff.a050    -   U   0
eth0/1.40      192.168.76.1/26                   Internal    0010.dbff.a050  400   U   0
eth0/1.42      192.168.76.241/29                 Access      0010.dbff.a050  402   U   0
eth0/1.46      192.168.76.65/27                  OM_INT      0010.dbff.a050  604   U   0
eth0/1.60      192.168.76.249/29                 SS7_INT     0010.dbff.a050  600   U   0
eth0/1.61      192.168.76.193/28                 SS7_INT     0010.dbff.a050  610   U   0
eth0/1.62      192.168.76.209/28                 SS7_INT     0010.dbff.a050  611   U   0
eth0/1.66      192.168.76.97/29                  CH_INTERCO  0010.dbff.a050  660   U   0
eth0/2         0.0.0.0/0                         Null        0010.dbff.a060    -   U   0
eth0/2.14      192.168.168.25/29                 SS7_EXT     0010.dbff.a060   14   U   0
eth0/3         192.168.170.195/24                O&M_EXT     0010.dbff.a070    -   U   0
vlan1          0.0.0.0/0                         VLAN        0010.dbff.a0f0    1   D   0
null           0.0.0.0/0                         Null        N/A               -   U   0
Set_HA:SetFW_CH_01(M)-> get int eth0/1
Interface ethernet0/1(VSI):
  description ethernet0/1
  number 5, if_info 12040, if_index 0
  link up, phy-link up/full-duplex
  vsys Root, zone Null, vr untrust-vr, vsd 0
  admin mtu 0, operating mtu 1500, default mtu 1500
  *ip 0.0.0.0/0   mac 0010.dbff.a050
  pmtu-v4 disabled
  ping disabled, telnet disabled, SSH disabled, SNMP disabled
  web disabled, ident-reset disabled, SSL disabled

  NHRP disabled
  bandwidth: physical 1000000kbps, configured egress [gbw 0kbps mbw 0kbps]
             configured ingress mbw 0kbps, current bw 0kbps
             total allocated gbw 0kbps
Number of SW session: 255135, hw sess err cnt 0
Set_HA:SetFW_CH_01(M)-> get int eth0/2
Interface ethernet0/2(VSI):
  description ethernet0/2
  number 6, if_info 14448, if_index 0
  link up, phy-link up/full-duplex
  vsys Root, zone Null, vr untrust-vr, vsd 0
  admin mtu 0, operating mtu 1500, default mtu 1500
  *ip 0.0.0.0/0   mac 0010.dbff.a060
  pmtu-v4 disabled
  ping disabled, telnet disabled, SSH disabled, SNMP disabled
  web disabled, ident-reset disabled, SSL disabled

  NHRP disabled
  bandwidth: physical 100000kbps, configured egress [gbw 0kbps mbw 0kbps]
             configured ingress mbw 0kbps, current bw 0kbps
             total allocated gbw 0kbps
Number of SW session: 255516, hw sess err cnt 0
Set_HA:SetFW_CH_01(M)->

Hello,

The bandwidth output here is the the configured / allocated bandwidth as QoS, not the "ordinary" traffic.

You can use "get count stat" to see the traffic counters.

Regards,

Igor

Hello

You can also see the interface bandwidth under Reports > Interface Bandwidth

Initially you wont see anything.

Run this command 'set traffic-shaping mode on'

You will see the numbers increasing under total utilised BW.

I think if you want to enable this command, you need to be aware that you are turning on traffic shaping.

This will definitely add additional processing onto CPU as well as all packets are sent to the traffic shaping queue for processing thus adding an additional bucket for incoming and outgoing packets.

What it effectively does is that if not traffic-shaping configuration has been setup, all traffic is prioritzed the same.

So, if you really do not intend to do traffic shaping, it may not be something you want to enable!

Hi;

I'm not currently using traffic shaping.

Thanks anyway for the useful info 🙂