Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Viewing the SFW Service Details

 

Monitoring stateful firewall is to view all the stateful firewall-related health and status. For example, assume that operator is seeing the SDG is marked red and upon further investigation by using the SDG Monitoring page, it is detected that the packet drop is more than zero and based on this criteria, the stateful firewall is marked as red. The operator selects the particular SDG and drills down to view the service details.

When you select an SDG pair on the left pane of the Monitoring page, you can drill down to select a specific service instance or template of a particular type. You can expand the stateful firewall tree to view the configured stateful firewall instances.

To view the SFW services to examine, analyze, and troubleshoot device problems and service failures

  1. From the View selector, select Service View. The workspaces that are available in this view are displayed.
  2. From the Junos Space user interface, click the Monitor icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  3. From the View pane, select the All Services item. Click the plus sign to expand the tree and select the service type, such as ADC, TLB, or SFW, for which you want to view monitoring details.
  4. From the task pane, under Service Instance, click the plus sign to drill down the tree and select the SDG or SDG pair for which you want to view monitoring statistics and charts of various system states. The Monitoring page is displayed.
    Figure 1: Monitoring Page for SFW Service
    Monitoring Page for SFW Service

When you select a specific SFW instance, the right pane refreshes to show the following information:

The SFW Details monitor displays the following details:

  • Name—Name of the configured service.

  • Service Status—Indicates whether the service is up or down.

  • Services PIC Name —Name of an adaptive services interface.

  • PIC Status—Indicates whether the services PIC is up or down.

  • Total Flows Active—Total number of flow sessions currently active on the service PIC.

  • Peak Total Flows Active—Highest number of active flows since the last PIC restart or since the last time flow statistics are flushed.

  • Created Flows per Second—Number of flows per second that were being created during the lifetime of the service PIC.

  • Deleted Flows per Second—Number of flows per second that were being deleted during the lifetime of the service PIC.

  • Total Sessions Active—Total number of low sessions currently active on the service PIC.

  • Peak Total Sessions Active—Highest number of active sessions since the last PIC restart or since the last time session statistics are flushed.

  • Created Sessions per Second—Number of sessions per second that were being created during the lifetime of the service PIC.

  • Deleted Sessions per Second—Number of sessions per second that were being deleted during the lifetime of the service PIC.

The SFW Subscriber Analysis—Trend Statistics monitor displays the following details:

  • Total Subscribers Active—Total number of subscribers currently active on the service PIC.

  • Peak Total Subscribers Active—Highest number of subscribers that were active during the lifetime of the service PIC.

From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.

The SFW Subscriber Analysis—Real Time Statistics monitor displays the following details:

  • Created Subscribers per Second—Rate at which subscribers are currently being created on the service PIC.

  • Deleted Subscribers per Second—Rate at which subscribers are currently being deleted on the service PIC.

  • Peak Created Subscribers per Second—Highest rate at which subscribers were being created during the lifetime of the service PIC.

  • Peak Deleted Subscribers per Second—Highest rate at which subscribers were being deleted during the lifetime of the service PIC.

From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.

The Critical Messages monitor displays the messages of a severity level of critical. The date and time at which the message was generated, and a description of the message to highlight the module/protocol and the problem condition are shown. From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.

The Alarms monitor displays a pie chart for critical, major, and minor alarms. Red denotes critical, orange denotes major, and yellow denotes minor alarms. The time at which the alarm is generated and a description of each alarm are shown. Mouse over each portion of the pie to view the number corresponding to the percentage of each alarm severity.

The CPU and Memory Usage monitor displays a line chart with time along the x-axis and the percentage along the y-axis. The legends reference CPU usage and memory usage. From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.

The Flow and Subscriber Count monitor displays a line chart with time along the x-axis and the count along the y-axis. The legends reference the number of flows and number of subscribers. From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.

The Packet Statistics monitor displays a line chart with time along the x-axis and count along the y-axis. Accepted, discarded, rejected, and errored packets are shown. From the Time Interval drop-down list, select the 6 hours, 12 hours, or 24 hours options to view details for the last 6 hours, last 12 hours, and last 24 hours respectively. Click the Refresh icon at the top of the monitor to update and display the contents of the table.