Juniper EX9200 Series, Features Manual

Page: 81 / 278

user@R2# show protocols ospf
area 0.0.0.0 {
interface ge-2/0/7.0 {
passive;
}
interface lo0.0 {
passive;
}
interface ge-2/0/8.0;
}
If you are done configuring Device R2, enter
commit
from configuration mode.
Verification
Confirm that the configuration is working properly.
• Clearing the Counters on page 63
• Sending TCP Traffic into the Network and Monitoring the Discards on page 63
Clearing the Counters
Purpose Confirm that the firewall counters are cleared.
Action On Device R1, run the
clear firewall all
command to reset the firewall counters to 0.
user@R1>
clear firewall all
Sending TCP Traffic into the Network and Monitoring the Discards
Purpose Make sure that the traffic of interest that is sent is rate-limited on the input interface
(ge-2/0/5).
Action Use a traffic generator to send 10 TCP packets with a source port of 80.
1.
The -s flag sets the source port. The -k flag causes the source port to remain steady
at 80 instead of incrementing. The -c flag sets the number of packets to 10. The -d
flag sets the packet size.
The destination IP address of 172.16.80.1 belongs to Device Host 2 that is connected
to Device R2. The user on Device Host 2 has requested a webpage from Device Host
1 (the webserver emulated by the traffic generator on Device Host 1). The packets
that being rate-limited are sent from Device Host 1 in response to the request from
Device Host 2.
NOTE: In this example the policer numbers are reduced to a bandwidth
limit of 8 Kbps and a burst size limit of 1500 KBps to ensure that some
packets are dropped during this test.
[root@host]# hping 172.16.80.1 -c 10 -s 80 -k -d 300
63 Copyright © 2016, Juniper Networks, Inc.
Chapter 7: Basic Single-Rate Two-Color Policers