Any Fool Can Know , the Point is to Understand….!

three color two rate fw lab

-----
[edit]
lab# show firewall
family inet {
filter threecolor {
term 1 {
then {
three-color-policer {
two-rate threecolor;
}
forwarding-class expedited-forwarding;
}
}
}
}
three-color-policer threecolor {
two-rate {
committed-information-rate 2m;
committed-burst-size 500k;
peak-information-rate 3m;
peak-burst-size 500k;
}
}

[edit]
lab# show interfaces ge-3/0/5
vlan-tagging;
unit 0 {
vlan-id 1;
family inet {
filter {
input threecolor;
}
address 2.0.0.1/24;
}
}
unit 1 {
vlan-id 2;
family inet {
address 3.0.0.1/24;
}
}

[edit]
lab# run show interfaces ge-3/0/7 extensive | match expedited-fo | except forwarding
1 expedited-fo 3038684 3038684 0

[edit]
lab# run show interfaces ge-3/0/7 extensive | match expedited-fo | except forwarding
1 expedited-fo 3055910 3055911 0

[edit]
-----------------

ospf stub area configuration

lab@NEO:r10> show configuration protocols ospf
area 0.0.0.1 {
stub;
interface ge-3/0/7.5;
interface lo0.10;
}

lab@NEO:r10>

lab@NEO:r10> show ospf database

OSPF database, Area 0.0.0.1
Type ID Adv Rtr Seq Age Opt Cksum Len
Router 2.2.2.2 2.2.2.2 0x80000005 144 0x20 0xc18e 36
Router *10.10.10.10 10.10.10.10 0x80000003 143 0x20 0x15c4 48
Network *102.0.0.2 10.10.10.10 0x80000002 143 0x20 0x179 32
Summary 1.1.1.1 2.2.2.2 0x80000001 223 0x20 0x47ea 28
Summary 2.2.2.2 2.2.2.2 0x80000001 223 0x20 0xf20 28
Summary 3.3.3.3 2.2.2.2 0x80000001 223 0x20 0x91e 28
Summary 5.5.5.5 2.2.2.2 0x80000001 223 0x20 0xa27d 28
Summary 6.6.6.6 2.2.2.2 0x80000001 223 0x20 0x6ab2 28
Summary 8.8.8.8 2.2.2.2 0x80000001 223 0x20 0x22f0 28
Summary 12.0.0.0 2.2.2.2 0x80000001 223 0x20 0xd851 28
Summary 16.0.0.0 2.2.2.2 0x80000001 223 0x20 0xae76 28
Summary 35.0.0.0 2.2.2.2 0x80000001 223 0x20 0xca45 28
Summary 56.0.0.0 2.2.2.2 0x80000001 223 0x20 0xae4d 28
Summary 67.0.0.0 2.2.2.2 0x80000001 223 0x20 0x1fd1 28
Summary 78.0.0.0 2.2.2.2 0x80000001 223 0x20 0x994b 28
Summary 138.0.0.0 2.2.2.2 0x80000001 223 0x20 0x9413 28

lab@NEO:r10>

ospf.summarization

-> I did a common mistake here.
I tried to summarize routes coming from area 1 -> area 0 under area 0 with area-range statement
This should have been applied within area 1 to start with . Hence i corrected it and applied it within area 1 nssa

[edit]
lab@NEO:r2# show protocols ospf
area 0.0.0.1 {
nssa {
default-lsa default-metric 10;
area-range 192.168.0.0/21;
}
interface ge-3/0/5.5;
}
area 0.0.0.0 {
interface lo0.2;
interface ge-3/0/5.2;
}

[edit]
lab@NEO:r2#

[edit]
lab@NEO:r1# run show route | match 192
192.168.0.0/21 *[OSPF/150] 00:01:54, metric 1, tag 0

[edit]
lab@NEO:r1#