Switching

Hi.

I have configured a storm control profile named default and applied it to an interface?

set forwarding-options storm-control-profiles default all bandwidth-percentage 20
set forwarding-options storm-control-profiles default action-shutdown

set interfaces ge-0/0/0 unit 0 family ethernet-switching storm-control default

Question1: If I name my storm control profile default, do I still have to explicitly apply it to an interface?

Question 2: Is there an operational command to verify if a storm control profile has been applied to an interface?

Thanks,

Deepak

Hi.

I have configured a storm control profile named default and applied it to an interface?

set forwarding-options storm-control-profiles default all bandwidth-percentage 20
set forwarding-options storm-control-profiles default action-shutdown

set interfaces ge-0/0/0 unit 0 family ethernet-switching storm-control default

Question1: If I name my storm control profile default, do I still have to explicitly apply it to an interface?

Question 2: Is there an operational command to verify if a storm control profile has been applied to an interface?

Thanks,

Deepak

Hi Deepak,

I do believe this has to be explicitly set to an interface when checking the Junos documentation here: 

https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/task/rate-limiting-storm-control-disabling-cli-els.html

Please see the below as well from Juniper: 

"You can customize the storm control level for a specific interface by explicitly configuring either bandwidth or level (but not both at the same time for the same interface).

bandwidth level- Configures the storm control level as the bandwidth in kilobits per second of the applicable traffic streams on that interface.

Bandwidth percentage-Configures the storm control level as a percentage of the available bandwidth used by the combined applicable traffic streams that are subject to storm control on that interface."

With regards to verifying storm control (2): 

You can use the below commands to be able to verify if its been added:

show interfaces ge-0/0/0.0 and you should see the profile associated with this interface (Example) and could even extend to using the detail and extensive extension:

"Use the show interfaces ge-0/0/0 detail or show interfaces ge-0/0/0 extensive operational mode command to view traffic statistics on the storm controlled interface. The input rate (bps) must not exceed the storm control limit."

[edit]user@switch> show interfaces xe-0/0/0
unit 0 {    family ethernet-switching {        vlan {            members default;        }        storm-control sc-profile;    }}

show storm-control (Example): 

[edit ethernet-switching-options]user@switch# show storm control
interface xe-0/0/0 {    bandwidth 5000000;}

The above examples were found on this Juniper document: 

https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/topic-map/using-storm-control-to-prevent-network-outages.html

HTH, 

Ethan 

Hi.

I have configured a storm control profile named default and applied it to an interface?

set forwarding-options storm-control-profiles default all bandwidth-percentage 20
set forwarding-options storm-control-profiles default action-shutdown

set interfaces ge-0/0/0 unit 0 family ethernet-switching storm-control default

Question1: If I name my storm control profile default, do I still have to explicitly apply it to an interface?

Question 2: Is there an operational command to verify if a storm control profile has been applied to an interface?

Thanks,

Deepak