Filter-Specific Counters And Policers; Filter-Specific Policer Overview - Juniper EX9200 Features Manual

CHAPTER 9

Filter-Specific Counters and Policers

Filter-Specific Policer Overview

Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
Filter-Specific Policer Overview on page 85
Example: Configuring a Stateless Firewall Filter to Protect Against TCP and ICMP
Floods on page 86
By default, a policer operates in term-specific mode so that, for a given firewall filter, the
Junos OS creates a separate policer instance for every filter term that references the
policer. As an option, you can configure a policer to operate in filter-specific mode so that
a single policer instance is used by all terms (within the same firewall filter) that reference
the policer.
For an IPv4 firewall filter with multiple terms that reference the same policer, configuring
the policer to operate in filter-specific mode enables you to count and monitor the activity
of the policer at the firewall filter level.
NOTE: Term-specific mode and filter-specific mode also apply to
prefix-specific policer sets.
To enable a single-rate two-color policer to operate in filter-specific mode, you can
include the statement at the following hierarchy levels:
filter-specific
[edit firewall policer policer-name]
[edit logical-systems logical-system-name firewall policer policer-name]
You can reference filter-specific policers from IPv4 (
Two-Color Policer Configuration Overview on page 49
Example: Configuring a Stateless Firewall Filter to Protect Against TCP and ICMP
Floods on page 86
Filter-Specific Counter and Policer Set Overview on page 100
family inet ) firewall filters only.
85