Re: [j-nsp] Verify loss priority for a forwarding class
Just realized that you're using an M7i - this is not supported. The other thing I can think of would be to configure a tos/dscp rewrite rule on egress for that specific forwarding-class and loss-priority high, and confirm the tos/dscp values on the tester. --Addy. On 3/13/10, meryem Z wrote: > > Hello , > > There is no "loss-priority" criteria to match on it. > Possible completions are below: > > Thanks. > > > > # set firewall filter test_plp term 1 from ? > Possible completions: >> address Match IP source or destination address > + ah-spi Match IPSec AH SPI value > + ah-spi-exceptDo not match IPSec AH SPI value > + apply-groups Groups from which to inherit configuration data > + apply-groups-except Don't inherit configuration data from these groups >> destination-address Match IP destination address > + destination-classMatch destination class > + destination-class-except Do not match destination class > + destination-port Match TCP/UDP destination port > + destination-port-except Do not match TCP/UDP destination port >> destination-prefix-list Match IP destination prefixes in named list > + dscp Match Differentiated Services (DiffServ) code point > + dscp-except Do not match Differentiated Services (DiffServ) code > point > + esp-spi Match IPSec ESP SPI value > + esp-spi-except Do not match IPSec ESP SPI value > first-fragment Match if packet is the first fragment > + forwarding-class Match forwarding class > + forwarding-class-except Do not match forwarding class > fragment-flags Match fragment flags (in symbolic or hex formats) > + fragment-offset Match fragment offset > + fragment-offset-except Do not match fragment offset > + icmp-codeMatch ICMP message code > + icmp-code-except Do not match ICMP message code > + icmp-typeMatch ICMP message type > + icmp-type-except Do not match ICMP message type >> interfaceMatch interface name > + interface-group Match interface group > + interface-group-except Do not match interface group >> interface-setMatch interface in set > + ip-options Match IP options > + ip-options-exceptDo not match IP options > is-fragment Match if packet is a fragment > + packet-lengthMatch packet length > + packet-length-except Do not match packet length > + port Match TCP/UDP source or destination port > + port-except Do not match TCP/UDP source or destination port > + precedence Match IP precedence value > + precedence-exceptDo not match IP precedence value >> prefix-list Match IP source or destination prefixes in named list > + protocol Match IP protocol type > + protocol-except Do not match IP protocol type > service-filter-hit Match if service-filter-hit is set >> source-address Match IP source address > + source-class Match source class > + source-class-except Do not match source class > + source-port Match TCP/UDP source port > + source-port-except Do not match TCP/UDP source port >> source-prefix-list Match IP source prefixes in named list > tcp-established Match packet of an established TCP connection > tcp-flagsMatch TCP flags (in symbolic or hex formats) > tcp-initial Match initial packet of a TCP connection > [edit] > mer...@liscr2# set firewall filter test_plp term 1 from > >> Date: Thu, 11 Mar 2010 07:14:31 -0500 >> Subject: Re: [j-nsp] Verify loss priority for a forwarding class >> From: addy.mat...@gmail.com >> To: merye...@hotmail.com; david@orange-ftgroup.com; >> juniper-nsp@puck.nether.net >> >> Meryem: >> >> Maybe try a firewall filter with a counter on the egress interface? >> Something like: >> >> from forwarding-class >> from loss-priority high >> then count fc-blah_lp-high >> then accept >> >> --Addy. >> >> >> On 3/11/10, meryem Z wrote: >> > >> > Hello David , >> > >> > Thanks for your response, but this command is supported M320 routers and >> > T-series routing platforms only.. >> > Is there any equivalent for M7i routers ? >> > >> > >> > Thank you. >> > >> > >> >> From: david@orange-ftgroup.com >> >> To: merye...@hotmail.com >> >> CC: juniper-nsp@puck.nether.net >> >> Date: Wed, 10 Mar 2010 14:12:10 +0100 >> >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class >>
Re: [j-nsp] Verify loss priority for a forwarding class
Hello , There is no "loss-priority" criteria to match on it. Possible completions are below: Thanks. # set firewall filter test_plp term 1 from ? Possible completions: > address Match IP source or destination address + ah-spi Match IPSec AH SPI value + ah-spi-exceptDo not match IPSec AH SPI value + apply-groups Groups from which to inherit configuration data + apply-groups-except Don't inherit configuration data from these groups > destination-address Match IP destination address + destination-classMatch destination class + destination-class-except Do not match destination class + destination-port Match TCP/UDP destination port + destination-port-except Do not match TCP/UDP destination port > destination-prefix-list Match IP destination prefixes in named list + dscp Match Differentiated Services (DiffServ) code point + dscp-except Do not match Differentiated Services (DiffServ) code point + esp-spi Match IPSec ESP SPI value + esp-spi-except Do not match IPSec ESP SPI value first-fragment Match if packet is the first fragment + forwarding-class Match forwarding class + forwarding-class-except Do not match forwarding class fragment-flags Match fragment flags (in symbolic or hex formats) + fragment-offset Match fragment offset + fragment-offset-except Do not match fragment offset + icmp-codeMatch ICMP message code + icmp-code-except Do not match ICMP message code + icmp-typeMatch ICMP message type + icmp-type-except Do not match ICMP message type > interfaceMatch interface name + interface-group Match interface group + interface-group-except Do not match interface group > interface-setMatch interface in set + ip-options Match IP options + ip-options-exceptDo not match IP options is-fragment Match if packet is a fragment + packet-lengthMatch packet length + packet-length-except Do not match packet length + port Match TCP/UDP source or destination port + port-except Do not match TCP/UDP source or destination port + precedence Match IP precedence value + precedence-exceptDo not match IP precedence value > prefix-list Match IP source or destination prefixes in named list + protocol Match IP protocol type + protocol-except Do not match IP protocol type service-filter-hit Match if service-filter-hit is set > source-address Match IP source address + source-class Match source class + source-class-except Do not match source class + source-port Match TCP/UDP source port + source-port-except Do not match TCP/UDP source port > source-prefix-list Match IP source prefixes in named list tcp-established Match packet of an established TCP connection tcp-flagsMatch TCP flags (in symbolic or hex formats) tcp-initial Match initial packet of a TCP connection [edit] mer...@liscr2# set firewall filter test_plp term 1 from > Date: Thu, 11 Mar 2010 07:14:31 -0500 > Subject: Re: [j-nsp] Verify loss priority for a forwarding class > From: addy.mat...@gmail.com > To: merye...@hotmail.com; david@orange-ftgroup.com; > juniper-nsp@puck.nether.net > > Meryem: > > Maybe try a firewall filter with a counter on the egress interface? > Something like: > > from forwarding-class > from loss-priority high > then count fc-blah_lp-high > then accept > > --Addy. > > > On 3/11/10, meryem Z wrote: > > > > Hello David , > > > > Thanks for your response, but this command is supported M320 routers and > > T-series routing platforms only.. > > Is there any equivalent for M7i routers ? > > > > > > Thank you. > > > > > >> From: david@orange-ftgroup.com > >> To: merye...@hotmail.com > >> CC: juniper-nsp@puck.nether.net > >> Date: Wed, 10 Mar 2010 14:12:10 +0100 > >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class > >> > >> Hi, > >> > >> You can view drops at the fabric level via the command : > >> > >> show class-of-service fabric statistics > >> > >> David > >> > >> > >> > >> > >> David Roy > >> Orange France - RBCI IP Technical Assistance Center > >> Tel. +33(0)299876472 > >> Mob. +33(0)685522213 > >> Email. david@orange-ftgroup.com > >> > >> > >> -Message d'origine- > >> De : juniper-nsp-boun...@puck.nether.net > >> [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z > >> Envoyé : mercredi 10 mars 2010 13:17 > >&g
Re: [j-nsp] Verify loss priority for a forwarding class
it seems a good idea , i will test it. thank you. > Date: Thu, 11 Mar 2010 07:14:31 -0500 > Subject: Re: [j-nsp] Verify loss priority for a forwarding class > From: addy.mat...@gmail.com > To: merye...@hotmail.com; david@orange-ftgroup.com; > juniper-nsp@puck.nether.net > > Meryem: > > Maybe try a firewall filter with a counter on the egress interface? > Something like: > > from forwarding-class > from loss-priority high > then count fc-blah_lp-high > then accept > > --Addy. > > > On 3/11/10, meryem Z wrote: > > > > Hello David , > > > > Thanks for your response, but this command is supported M320 routers and > > T-series routing platforms only.. > > Is there any equivalent for M7i routers ? > > > > > > Thank you. > > > > > >> From: david@orange-ftgroup.com > >> To: merye...@hotmail.com > >> CC: juniper-nsp@puck.nether.net > >> Date: Wed, 10 Mar 2010 14:12:10 +0100 > >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class > >> > >> Hi, > >> > >> You can view drops at the fabric level via the command : > >> > >> show class-of-service fabric statistics > >> > >> David > >> > >> > >> > >> > >> David Roy > >> Orange France - RBCI IP Technical Assistance Center > >> Tel. +33(0)299876472 > >> Mob. +33(0)685522213 > >> Email. david....@orange-ftgroup.com > >> > >> > >> -Message d'origine- > >> De : juniper-nsp-boun...@puck.nether.net > >> [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z > >> Envoyé : mercredi 10 mars 2010 13:17 > >> Cc : juniper-nsp@puck.nether.net > >> Objet : [j-nsp] Verify loss priority for a forwarding class > >> > >> > >> hello Community, > >> > >> I configured a forwarding class with high priority loss. Now I need to > >> verify that the traffic sent under this forwarding class ( using a traffic > >> generator) has a high priority loss. The "show interface queue " doesn't > >> show this information. is there any other way to do it ? > >> > >> Thank you. > >> > >> > >> > >> _ > >> Votre messagerie et bien plus où que vous soyez. Passez à Windows Live > >> Hotmail, c'est gratuit ! > >> https://signup.live.com/signup.aspx?id=60969 > >> ___ > >> juniper-nsp mailing list juniper-nsp@puck.nether.net > >> https://puck.nether.net/mailman/listinfo/juniper-nsp > >> > >> * > >> This message and any attachments (the "message") are confidential and > >> intended solely for the addressees. > >> Any unauthorised use or dissemination is prohibited. > >> Messages are susceptible to alteration. > >> France Telecom Group shall not be liable for the message if altered, > >> changed or falsified. > >> If you are not the intended addressee of this message, please cancel it > >> immediately and inform the sender. > >> > >> > > > > _ > > Hotmail : une messagerie performante et gratuite avec une sécurité signée > > Microsoft > > https://signup.live.com/signup.aspx?id=60969 > > ___ > > juniper-nsp mailing list juniper-nsp@puck.nether.net > > https://puck.nether.net/mailman/listinfo/juniper-nsp > > > > -- > Sent from my mobile device _ Hotmail : un service de messagerie gratuit, fiable et complet https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Verify loss priority for a forwarding class
Meryem: Maybe try a firewall filter with a counter on the egress interface? Something like: from forwarding-class from loss-priority high then count fc-blah_lp-high then accept --Addy. On 3/11/10, meryem Z wrote: > > Hello David , > > Thanks for your response, but this command is supported M320 routers and > T-series routing platforms only.. > Is there any equivalent for M7i routers ? > > > Thank you. > > >> From: david@orange-ftgroup.com >> To: merye...@hotmail.com >> CC: juniper-nsp@puck.nether.net >> Date: Wed, 10 Mar 2010 14:12:10 +0100 >> Subject: RE: [j-nsp] Verify loss priority for a forwarding class >> >> Hi, >> >> You can view drops at the fabric level via the command : >> >> show class-of-service fabric statistics >> >> David >> >> >> >> >> David Roy >> Orange France - RBCI IP Technical Assistance Center >> Tel. +33(0)299876472 >> Mob. +33(0)685522213 >> Email. david@orange-ftgroup.com >> >> >> -Message d'origine- >> De : juniper-nsp-boun...@puck.nether.net >> [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z >> Envoyé : mercredi 10 mars 2010 13:17 >> Cc : juniper-nsp@puck.nether.net >> Objet : [j-nsp] Verify loss priority for a forwarding class >> >> >> hello Community, >> >> I configured a forwarding class with high priority loss. Now I need to >> verify that the traffic sent under this forwarding class ( using a traffic >> generator) has a high priority loss. The "show interface queue " doesn't >> show this information. is there any other way to do it ? >> >> Thank you. >> >> >> >> _ >> Votre messagerie et bien plus où que vous soyez. Passez à Windows Live >> Hotmail, c'est gratuit ! >> https://signup.live.com/signup.aspx?id=60969 >> ___ >> juniper-nsp mailing list juniper-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> >> * >> This message and any attachments (the "message") are confidential and >> intended solely for the addressees. >> Any unauthorised use or dissemination is prohibited. >> Messages are susceptible to alteration. >> France Telecom Group shall not be liable for the message if altered, >> changed or falsified. >> If you are not the intended addressee of this message, please cancel it >> immediately and inform the sender. >> >> > > _ > Hotmail : une messagerie performante et gratuite avec une sécurité signée > Microsoft > https://signup.live.com/signup.aspx?id=60969 > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Sent from my mobile device ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Verify loss priority for a forwarding class
Hello David , Thanks for your response, but this command is supported M320 routers and T-series routing platforms only.. Is there any equivalent for M7i routers ? Thank you. > From: david@orange-ftgroup.com > To: merye...@hotmail.com > CC: juniper-nsp@puck.nether.net > Date: Wed, 10 Mar 2010 14:12:10 +0100 > Subject: RE: [j-nsp] Verify loss priority for a forwarding class > > Hi, > > You can view drops at the fabric level via the command : > > show class-of-service fabric statistics > > David > > > > > David Roy > Orange France - RBCI IP Technical Assistance Center > Tel. +33(0)299876472 > Mob. +33(0)685522213 > Email. david@orange-ftgroup.com > > > -Message d'origine- > De : juniper-nsp-boun...@puck.nether.net > [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z > Envoyé : mercredi 10 mars 2010 13:17 > Cc : juniper-nsp@puck.nether.net > Objet : [j-nsp] Verify loss priority for a forwarding class > > > hello Community, > > I configured a forwarding class with high priority loss. Now I need to verify > that the traffic sent under this forwarding class ( using a traffic > generator) has a high priority loss. The "show interface queue " doesn't show > this information. is there any other way to do it ? > > Thank you. > > > > _ > Votre messagerie et bien plus où que vous soyez. Passez à Windows Live > Hotmail, c'est gratuit ! > https://signup.live.com/signup.aspx?id=60969 > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > > * > This message and any attachments (the "message") are confidential and > intended solely for the addressees. > Any unauthorised use or dissemination is prohibited. > Messages are susceptible to alteration. > France Telecom Group shall not be liable for the message if altered, changed > or falsified. > If you are not the intended addressee of this message, please cancel it > immediately and inform the sender. > > _ Hotmail : une messagerie performante et gratuite avec une sécurité signée Microsoft https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Verify loss priority for a forwarding class
Hi, You can view drops at the fabric level via the command : show class-of-service fabric statistics David David Roy Orange France - RBCI IP Technical Assistance Center Tel. +33(0)299876472 Mob. +33(0)685522213 Email. david@orange-ftgroup.com -Message d'origine- De : juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z Envoyé : mercredi 10 mars 2010 13:17 Cc : juniper-nsp@puck.nether.net Objet : [j-nsp] Verify loss priority for a forwarding class hello Community, I configured a forwarding class with high priority loss. Now I need to verify that the traffic sent under this forwarding class ( using a traffic generator) has a high priority loss. The "show interface queue " doesn't show this information. is there any other way to do it ? Thank you. _ Votre messagerie et bien plus où que vous soyez. Passez à Windows Live Hotmail, c'est gratuit ! https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp * This message and any attachments (the "message") are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. Messages are susceptible to alteration. France Telecom Group shall not be liable for the message if altered, changed or falsified. If you are not the intended addressee of this message, please cancel it immediately and inform the sender. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Verify loss priority for a forwarding class
hello Community, I configured a forwarding class with high priority loss. Now I need to verify that the traffic sent under this forwarding class ( using a traffic generator) has a high priority loss. The "show interface queue " doesn't show this information. is there any other way to do it ? Thank you. _ Votre messagerie et bien plus où que vous soyez. Passez à Windows Live Hotmail, c'est gratuit ! https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
