Juniper EX9200 Features Manual page 120

Traffic Policers Feature Guide for EX9200 Switches
CLI Quick
Configuration
Step-by-Step
Procedure
102
To configure this example, perform the following tasks:
Configuring a Policer for Prefix-Specific Counting and Policing on page 102
Configuring a Prefix-Specific Action Based on the Policer on page 103
Configuring an IPv4 Filter That References the Prefix-Specific Action on page 104
Applying the Firewall Filter to IPv4 Input Traffic at a Logical Interface on page 105
To quickly configure this example, copy the following configuration commands into a
text file, remove any line breaks, and then paste the commands into the CLI at the
hierarchy level.
set firewall policer 1Mbps-policer if-exceeding bandwidth-limit 1m
set firewall policer 1Mbps-policer if-exceeding burst-size-limit 63k
set firewall policer 1Mbps-policer then discard
set firewall family inet prefix-action psa-1Mbps-per-source-24-32-256 policer
1Mbps-policer
set firewall family inet prefix-action psa-1Mbps-per-source-24-32-256 count
set firewall family inet prefix-action psa-1Mbps-per-source-24-32-256
subnet-prefix-length 24
set firewall family inet prefix-action psa-1Mbps-per-source-24-32-256 source-prefix-length
32
set firewall family inet filter limit-source-one-24 term one from source-address
10.10.10.0/24
set firewall family inet filter limit-source-one-24 term one then prefix-action
psa-1Mbps-per-source-24-32-256
set interfaces so-0/0/2 unit 0 family inet filter input limit-source-one-24
set interfaces so-0/0/2 unit 0 family inet address 10.39.1.1/16
Configuring a Policer for Prefix-Specific Counting and Policing
To configure a policer to be used for prefix-specific counting and policing:
Enable configuration of a single-rate two-color policer.
1.
[edit]
user@host# edit firewall
Define the traffic limit.
2.
[edit firewall policer 1Mbps-policer]
user@host# set if-exceeding bandwidth-limit 1m
user@host# set if-exceeding burst-size-limit 63k
Packets in a traffic flow that conforms to this limit are passed with the PLP set to
.
low
Define the actions for nonconforming traffic.
3.
[edit firewall policer 1Mbps-policer]
user@host# set then discard
Packets in a traffic flow that exceeds this limit are discarded. Other configurable
actions for a single-rate two-color policer are to set the forwarding class and to set
the PLP level.
policer 1Mbps-policer
Copyright © 2016, Juniper Networks, Inc.
[edit]