Three-Color Policer Configuration Overview; Configuring Three-Color Traffic Policers At Layer; Table 10: Three-Color Policer Configuration And Application Overview - Juniper EX9200 Features Manual

PART 4
Configuring Three-Color Traffic Policers
at Layer 3

Three-Color Policer Configuration Overview

Table 10: Three-Color Policer Configuration and Application Overview

Policer Configuration
Single-Rate Three-Color Policer
Defines traffic rate limiting that you can apply to Layer 3 protocol-specific traffic at a logical interface. Can be applied as a
firewall filter policer only.
Provides moderate allowances for short periods of traffic that exceed the committed burst size.
Basic single-rate TCM policer
configuration:
[edit firewall]
three-color-policer policer-name {
{
single-rate
(color-aware | color-blind);
committed-information-rate
bps;
committed-burst-size bytes;
excess-burst-size bytes;
}
action {
loss-priority high then discard;
}
}
Copyright © 2016, Juniper Networks, Inc.
Three-Color Policer Configuration Overview on page 145
Three-Color Policer Configuration Guidelines on page 149
Basic Single-Rate Three-Color Policers on page 153
Basic Two-Rate Three-Color Policers on page 161
Table 10 on page 145 describes the hierarchy levels at which you can configure and apply
single-rate tricolor-marking (single-rate TCM) policers and two-rate tricolor-marking
(two-rate TCM) policers to Layer 3 traffic. For information about applying three-color
policers to Layer 2 traffic, see
Layer 3 Application
Reference the policer from a firewall filter, and
apply the filter to a protocol family on a logical
interface:
[edit firewall]
family family-name {
filter filter-name {
term term-name {
from {
... match-conditions ...
}
then {
three-color-policer
single-rate policer-name;
}
}
}
}
"Three-Color Policing at Layer 2 Overview" on page
{
41.
Key Points
Policer configuration:
Include the
single-rate
(color-aware | color-blind)
statement.
Firewall filter configuration:
Include the
three-color-policer
single-rate policer-name
action.
Applying the firewall filter to the
logical interface:
Include the filter (input |
output) filter-name
statement.
145