Juniper EX9200 Features Manual page 144

Traffic Policers Feature Guide for EX9200 Switches
Step-by-Step
Procedure
Results
126
policer af-policer {
if-exceeding {
bandwidth-limit 300k;
burst-size-limit 50k;
}
then discard;
}
policer ef-policer {
if-exceeding {
bandwidth-limit 200k;
burst-size-limit 50k;
}
then {
loss-priority high;
forwarding-class expedited-forwarding;
}
}
Applying Multifield Classification Filtering and Policing to the Logical Interface
To apply multifield classification filtering and policing to the logical interface:
Enable configuration of IPv4 on the logical interface.
1.
[edit]
user@host# edit interfaces ge-1/2/0 unit 0 family inet
Configure an IP address for the logical interface.
2.
[edit interfaces ge-1/2/0 unit 0 family inet ]
user@host# set address 192.168.1.1/24
Apply the firewall filter to the logical interface input.
3.
[edit interfaces ge-1/2/0 unit 0 family inet ]
user@host# set filter input mfc-filter
NOTE: Because the policer is executed before the filter, if an input policer
is also configured on the logical interface, it cannot use the forwarding
class and PLP of a multifield classifier associated with the interface.
Confirm the configuration of the interface by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
ge-1/2/0 {
unit 0 {
family inet {
filter {
input mfc-filter;
}
configuration
show interfaces
Copyright © 2016, Juniper Networks, Inc.