Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3152 / 3946

Verification
To confirm that the firewall filters are working properly, perform the following tasks:
•
Verifying that Firewall Filters and Policers are Operational on page 3056
•
Verifying that Schedulers and Scheduler-Maps are Operational on page 3056
Verifying that Firewall Filters and Policers are Operational
Purpose Verify the operational state of the firewall filters and policers that are configured on the
switch.
Action Use the operational mode command:
user@switch> show firewall
Filter: ingress-port-voip-class-limit-tcp-icmp
Counters:
Name Packets
icmp-counter 0
tcp-counter 0
Policers:
Name Packets
icmp-connection-policer 0
tcp-connection-policer 0
Filter: ingress-vlan-rogue-block
Filter: egress-vlan-watch-employee
Counters:
Name Packets
employee-web—counter 0
Meaning The
show firewall
command displays the names of the firewall filters, policers, and
counters that are configured on the switch. The output fields show byte and packet
counts for all configured counters and the packet count for all policers.
Verifying that Schedulers and Scheduler-Maps are Operational
Purpose Verify that schedulers and scheduler-maps are operational on the switch.
Action Use the operational mode command:
user@switch> show class-of-service scheduler-map
Scheduler map: default, Index: 2
Scheduler: default-be, Forwarding class: best-effort, Index: 20
Transmit rate: 95 percent, Rate Limit: none, Buffer size: 95 percent,
Priority: low
Drop profiles:
Loss priority Protocol Index Name
Low non-TCP 1 default-drop-profile
Low TCP 1 default-drop-profile
High non-TCP 1 default-drop-profile
High TCP 1 default-drop-profile
Scheduler: default-nc, Forwarding class: network-control, Index: 22
Copyright © 2010, Juniper Networks, Inc. 3056
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3