SR66路由器如何配置统计

SR66路由器如何配置统计

一、SR66的某些业务，例如：nat、aspf、firewall等都是回创建会话的，所以ACL在会话老化前只能匹配一次。在firewall packet-filter 里面，通过display acl acl-number看到的现象是:同一个流只有一次统计,可以通过display firewall-statistics all查看具体的配置。每个业务都有自己的统计命令，建议通过具体业务的统计命令查看统计信息

<SR6604>dis firewall-statistics all

Firewall is disable at slot 0, default filtering method is 'permit'.

Firewall is enable at slot 3, default filtering method is 'permit'.

Interface: GigabitEthernet3/2/0

In-bound Policy: acl 3999

From 2010-12-28 17:34:38 to 2010-12-28 17:35:07

5 packets, 6728 bytes, 1% permitted,

0 packets, 0 bytes, 0% denied,

1243182 packets, 555606511 bytes, 99% permitted default,

0 packets, 0 bytes, 0% denied default,

Totally 1243187 packets, 555613239 bytes, 100% permitted,

Totally 0 packets, 0 bytes, 0% denied.

Interface: GigabitEthernet3/2/0

Out-bound Policy: acl 3999

From 2010-12-28 17:34:38 to 2010-12-28 17:35:07

1 packets, 8128 bytes, 1% permitted,

0 packets, 0 bytes, 0% denied,

1582733 packets, 1 Gb 361598852 bytes, 99% permitted default,

0 packets, 0 bytes, 0% denied default,

Totally 1582734 packets, 1 Gb 361606980 bytes, 100% permitted,

Totally 0 packets, 0 bytes, 0% denied.

 二、SR66的CBQ中的accounting功能

答：在芯片硬件转发的情况下，配置CBQ时是没有统计计数的。为了实现对流量的查看统计，增加了accounting以实现对CBQ的流量统计。FIP板通过CPU转发，本身可以实现CBQ的统计计数，所以不需要该功能；SAP板通过硬件转发，支持该功能，一句话，该命令仅在配置了SAP接口卡的路由器上支持。（同时只有工作在二层模式下支持）