Technical Documentation

Configuring Accounting for Firewall Filters

Juniper Networks devices can collect various kinds of data about traffic passing through the device. You can set up one or more accounting profiles that specify some common characteristics of this data, including the following:

  • Fields used in the accounting records
  • Number of files that the routing platform retains before discarding, and the number of bytes per file
  • Polling period that the system uses to record the data

There are several types of accounting profiles: interface, firewall filter, destination class, and Routing Engine. To configure an accounting profile, include statements at the [edit accounting-options] hierarchy level. For more information, see the Junos Network Management Configuration Guide.

To activate a firewall filter profile, include the accounting-profile statement at the [edit firewall family family-name filter filter-name] hierarchy level:

[edit firewall family family-name filter filter-name]accounting-profile profile-name;

If you apply the same profile name to both a firewall filter and an interface, it causes an error.

The following example configures an accounting profile called fw_profile and applies it to the firewall filter called myfilter.

[edit]accounting-options {filter-profile fw_profile {file fw_accounting;interval 60;counters {counter1;counter2;counter3;}}}firewall {family inet {filter myfilter {accounting-profile fw_profile;...term accept-all {then {count counter1;accept;}}}}}

Related Topics


Published: 2010-07-16

Help
|
My Account
|
Log Out