[Contents] [Prev] [Next] [Index] [Report an Error]

Monitoring Service Sets

A service set is a group of rules from a stateful firewall filter, Network Address Translation (NAT), intrusion detection service (IDS), or IP Security (IPSec) that you apply to a services interface. You can configure IDS, NAT, and stateful firewall filter service rules within the same service set. You must configure IPSec services in a separate service set. For more information about using service sets with these features, see the J-series Services Router Advanced WAN Access Configuration Guide.

Service set information includes the services interfaces on the Services Router, the number of services sets configured on the interfaces, and the total CPU used by the service sets. To view these service set properties, select Monitor>Service Sets in the J-Web interface, or enter the following CLI show commands:

Table 58 summarizes key output fields in service sets displays.

Table 58: Summary of Key Service Set Output Fields

Field

Values

Additional Information

Service Set Summary  

Interface

Name of the adaptive services interface on the Services Router—always sp-0/0/0.

 

Service sets configured

Total number of service sets configured on the Services Router.

 

Bytes used

Total number of general-purpose memory bytes being used by the service set configuration.

A portion of the general-purpose memory on a Services Router is allocated for storing traffic flows, NAT pools, and so on.

Policy bytes used

Total number of configuration-object memory bytes being used by routing policies associated with the service set configuration.

A portion of the general-purpose memory on a Services Router is allocated for storing configuration objects like firewall rules, routing policies, and so on.

CPU utilization

Percentage of the CPU resources being used.

A high CPU utilization indicates that the router is under heavy load. High CPU utilization might cause performance degradation in forwarding or the application of other services.

Memory Usage  

Interface

Name of the adaptive services interface on the Services Router—always sp-0/0/0.

 

Service set

Name of a service set.

 

Memory Utilization %

Percentage of the memory resources being used by the service set.

A high CPU utilization indicates that the router is under heavy load. High CPU utilization might cause performance degradation in forwarding or the application of other services.

Memory zone

Memory zone in which the services interface is currently operating. Following are valid zones:

  • Green—All new flows are allowed.
  • Yellow—Unused memory is reclaimed. All new flows are allowed.
  • Orange—New flows are only allowed for service sets that are using less than their equal share of memory.
  • Red—No new flows are allowed.
 

[Contents] [Prev] [Next] [Index] [Report an Error]