Juniper EX9200 Features Manual page 141

Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Copyright © 2016, Juniper Networks, Inc.
—The third and final filter term passes all other packets to
other-customers
a policer that rate-limits traffic to a bandwidth limit of 300 Kbps and a burst-size limit
of 50 KB (the same traffic limits as defined by
packets in a nonconforming flow are marked for the
class and set to the
medium-high
The following example requires you to navigate various levels in the configuration
hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration
Mode.
To configure this example, perform the following tasks:
Configuring Policers to Rate-Limit Expedited-Forwarding and Assured-Forwarding
Traffic on page 123
Configuring a Multifield Classification Filter That Also Applies Policing on page 124
Applying Multifield Classification Filtering and Policing to the Logical
Interface on page 126
To quickly configure this example, copy the following configuration commands into a
text file, remove any line breaks, and then paste the commands into the CLI at the
hierarchy level.
set firewall policer ef-policer if-exceeding bandwidth-limit 300k
set firewall policer ef-policer if-exceeding burst-size-limit 50k
set firewall policer ef-policer then loss-priority high
set firewall policer ef-policer then forwarding-class expedited-forwarding
set firewall policer af-policer if-exceeding bandwidth-limit 300k
set firewall policer af-policer if-exceeding burst-size-limit 50k
set firewall policer af-policer then loss-priority high
set firewall policer af-policer then forwarding-class assured-forwarding
set firewall family inet filter mfc-filter term isp1-customers from source-address 10.1.1.0/24
set firewall family inet filter mfc-filter term isp1-customers from source-address 10.1.2.0/24
set firewall family inet filter mfc-filter term isp1-customers then loss-priority low
set firewall family inet filter mfc-filter term isp1-customers then forwarding-class
expedited-forwarding
set firewall family inet filter mfc-filter term isp2-customers from source-address
10.1.3.0/24
set firewall family inet filter mfc-filter term isp2-customers from source-address
10.1.4.0/24
set firewall family inet filter mfc-filter term isp2-customers then policer ef-policer
set firewall family inet filter mfc-filter term other-customers then policer af-policer
set interfaces ge-1/2/0 unit 0 family inet address 192.168.1.1/24
set interfaces ge-1/2/0 unit 0 family inet filter input mfc-filter
Configuring Policers to Rate-Limit Expedited-Forwarding and Assured-Forwarding
Traffic
To configure policers to rate-limit expedited-forwarding and assured-forwarding traffic:
Define traffic limits for expedited-forwarding traffic.
1.
[edit]
Chapter 11: Multifield Classification
). This policer specifies that
ef-policer
assured-forwarding
loss priority.
,
af-policer
forwarding
[edit]
123