Firewall Filter Configuration > Configuring Accounting

Juniper Networks routing platforms can collect various kinds of data about traffic passing through the routing platform. You can set up one or more accounting profiles that specify some common characteristics of this data, including the following:

• Fields used in the accounting records
• Number of files that the routing platform retains before discarding, and the number of bytes per file
• Polling period that the system uses to record the data

To implement an accounting profile, you must configure the profile and then apply it to an interface or firewall filter. For more information, see the JUNOS Network Management Configuration Guide.

Configuring a Firewall Filter Accounting Profile

There are several types of accounting profiles: interface, firewall filter, destination class, and Routing Engine. To configure an accounting profile, include statements at the [edit accounting-options] hierarchy level. To activate firewall filter profiles, you must reference them at the [edit firewall family family-name] hierarchy level. If you reference the same profile name from both a firewall filter and an interface in the same configuration, it causes an error.

The following example shows accounting profile fw_profile for the firewall filter myfilter. For more information about configuring accounting profiles, see the JUNOS Network Management Configuration Guide.

[edit]

accounting-options {

    filter-profile fw_profile {

        file fw_accounting;

        interval 60;

        counters {

            counter1;

            counter2;

            counter3;

        }

    }

}

To apply the fw_profile accounting profile to a firewall filter, include the accounting-profile statement as shown:

[edit]

firewall {

    family inet {

        filter myfilter {

            accounting-profile fw_profile;

            ...

            term accept-all {

                then {

                    count counter1;

                    accept;

                }

            }

        }

    }

}