Technical Documentation

Example: Traffic Sampling on a Multiservices PIC

The following example shows a firewall filter sample-monitor, which, when attached to an interface, ensures that all traffic entering that interface with a source address matching address 10.1.1.1 is sampled and sent to the output interface ms-2/0/0.

[edit]firewall {family inet {filter sample-monitor {term sample-term {from {source-address {10.1.1.1/32;}}then {sample;accept;}}}}}forwarding-options {sampling {input {family inet {rate 1;}}output {extension-service abc-sample {provider-specific rules;}interface ms-2/0/0;}}

You can attach the firewall filter created in the above sample to any interface in your network.


Published: 2010-07-15

Help
|
My Account
|
Log Out