Example: Configuring And Applying A Firewall Filter For A Multifield Classifier - Juniper EX9200 Features Manual

Verification
Purpose
Action
Related
Documentation

Example: Configuring and Applying a Firewall Filter for a Multifield Classifier

Copyright © 2016, Juniper Networks, Inc.
address 192.168.1.1/24;
}
}
}
If you are done configuring the device, enter
Confirm that the configuration is working properly.
Displaying the Number of Packets Processed by the Policer at the Logical Interface
Verify the traffic flow through the logical interface and that the policer is evaluated when
packets are received on the logical interface.
Use the operational mode command for the filter you applied to the logical
show firewall
interface.
user@host> show firewall filter rate-limit-in
Filter: rate-limit-in
Policers:
Name
ef-policer-isp2-customers
af-policer-other-customers
The command output lists the policers applied by the firewall filter
number of packets that matched the filter term.
NOTE: The packet count includes the number of out-of-specification
(out-of-spec) packet counts, not all packets policed by the policer.
The policer name is displayed concatenated with the name of the firewall filter term in
which the policer is referenced as an action.
Two-Color Policer Configuration Overview on page 49
Multifield Classification Overview on page 115
Multifield Classification Requirements and Restrictions on page 118
Multifield Classification Limitations on M Series Routers on page 119
statement
tri-color
This example shows how to configure a firewall filter to classify traffic using a multifield
classifier. The classifier detects packets of interest to class of service (CoS) as they arrive
on an interface. Multifield classifiers are used when a simple behavior aggregate (BA)
Chapter 11: Multifield Classification
from configuration mode.
commit
Packets
32863
3870
rate-limit-in
, and the
127