assured-forwarding
我有一个防火墙过滤器,如果不超过带宽阈值,它会将 ICMP 流量分类:
root@vmx> show configuration firewall filter example | display inheritance no-comments
term policer-example {
from {
protocol icmp;
}
then {
policer class-example;
forwarding-class assured-forwarding;
accept;
}
}
root@vmx> show configuration firewall policer class-example | display inheritance no-comments
if-exceeding {
bandwidth-limit 8k;
burst-size-limit 1500;
}
then forwarding-class best-effort;
root@vmx>
命名的防火墙过滤器example
设置在ge-0/0/2
接口的入口方向,我正在生成通过ge-0/0/2
接口进入转发平面的传输流量(ICMP 消息)。
如何确定我的流量是否最终进入assured-forwarding
或best-effort
上课?DSCP 值始终为 0(十进制),类似的命令show interfaces forwarding-class-counters
什么也不显示:
root@vmx> show interfaces forwarding-class-counters
root@vmx> show interfaces forwarding-class-counters ge-0/0/2
Logical interface ge-0/0/2.0 (Index 343) (SNMP ifIndex 543)
Forwarding-class statistics are not applicable to this interface.
root@vmx>