Routing

Expand all | Collapse all

Command to see the MPLS TCF markings of packets ingressing a Juniper router

Jump to Best Answer
  • 1.  Command to see the MPLS TCF markings of packets ingressing a Juniper router

    Posted 01-12-2018 04:25
    Hi All, If I had "another" vendor's PE router connected to a Juniper MX960 and I wanted to see the TCF (EXP) markings/values in the incoming MPLS headers on the Juniper's interface (the interface connected to the PE) what would be the JunoS command that would allow me to see this? TIA


  • 2.  RE: Command to see the MPLS TCF markings of packets ingressing a Juniper router

     
    Posted 01-12-2018 04:39

    Hi Folks,

    Just my 2 cents on this….

     

    If you want to troubleshoot based on EXP values marked by your peer; I would suggest to configure a firewall mpls filter to count EXP tagged packets and apply to input direction on the Core facing interface.

     

    set firewall family mpls filter interface_in term a from exp 7

    set firewall family mpls filter interface_in term a then count exp7

    set firewall family mpls filter interface_in term a then accept

    set firewall family mpls filter interface_in term b from exp 6

    set firewall family mpls filter interface_in term b then count exp6

    set firewall family mpls filter interface_in term b then accept

    set firewall family mpls filter interface_in term c from exp 5

    set firewall family mpls filter interface_in term c then count exp5

    set firewall family mpls filter interface_in term c then accept

    set firewall family mpls filter interface_in term d from exp 4

    set firewall family mpls filter interface_in term d then count exp4

    set firewall family mpls filter interface_in term d then accept

    set firewall family mpls filter interface_in term e from exp 3

    set firewall family mpls filter interface_in term e then count exp3

    set firewall family mpls filter interface_in term e then accept

    set firewall family mpls filter interface_in term f from exp 2

    set firewall family mpls filter interface_in term f then count exp2

    set firewall family mpls filter interface_in term f then accept

    set firewall family mpls filter interface_in term g from exp 1

    set firewall family mpls filter interface_in term g then count exp1

    set firewall family mpls filter interface_in term g then accept

    set firewall family mpls filter interface_in term h from exp 0

    set firewall family mpls filter interface_in term h then count exp0

    set firewall family mpls filter interface_in term h then accept

    set firewall family mpls filter interface_in term i then accept

     



  • 3.  RE: Command to see the MPLS TCF markings of packets ingressing a Juniper router

    Posted 01-12-2018 04:48
    Many thanks for the rapid response Python - that looks just the job! So, after I've applied this input firewall filter to the appropriate interface what would be the command to see the results (i.e. the "count" values)? I'm guessing it'll look something like this: show firewall counter exp(n) filter interface-in (where n = a value from 0 to 7) Would that be correct? TIA


  • 4.  RE: Command to see the MPLS TCF markings of packets ingressing a Juniper router
    Best Answer

     
    Posted 01-12-2018 07:56

    Hi Folks,

    Please find the process,

     

    To Apply,

     

    labroot@re0_re0:pe1> show configuration interfaces

    ge-0/0/0 {

        unit 23 {

            vlan-id 23;

            family inet {

                address 1.1.23.1/30;

            }

            family mpls {

                filter {

                    input interface_in;

                }

            }

        }

    }

     

    To check,

     

    labroot@re0_re0:pe1> show firewall filter interface_in      

     

    Filter: __pe1/interface_in                                    

    Counters:

    Name                                                Bytes              Packets

    exp0                                                    0                    0

    exp1                                                    0                    0

    exp2                                                    0                    0

    exp3                                                    0                    0

    exp4                                                    0                    0

    exp5                                                    0                    0

    exp6                                                    0                    0

    exp7                                                    0                    0

     

    labroot@re0_re0:pe1>