Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Configuring Accounting for Firewall Filters
Juniper Networks devices can collect various kinds of data about traffic passing through
the device. You can set up one or more accounting profiles that specify some common
characteristics of this data, including the following:
• Fields used in the accounting records
• Number of files that the routing platform retains before discarding, and the number of
bytes per file
• Polling period that the system uses to record the data
There are several types of accounting profiles: interface, firewall filter, destination class,
and Routing Engine. To configure an accounting profile, include statements at the [edit
accounting-options] hierarchy level. For more information, see the Junos OS Network
Management Configuration Guide.
To activate a firewall filter profile, include the accounting-profile statement at the [edit
firewall family family-name filter filter-name] hierarchy level:
[edit firewall family family-name filter filter-name]
accounting-profile profile-name;
If you apply the same profile name to both a firewall filter and an interface, it causes an
error.
The following example configures an accounting profile called fw_profile and applies it
to the firewall filter called myfilter.
[edit]
accounting-options {
filter-profile fw_profile {
file fw_accounting;
interval 60;
counters {
counter1;
counter2;
counter3;
}
}
}
firewall {
family inet {
filter myfilter {
accounting-profile fw_profile;
...
term accept-all {
then {
count counter1;
accept;
}
}
}
}
268
Copyright © 2010, Juniper Networks, Inc.