Juniper EX9200 Features Manual page 173

Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Copyright © 2016, Juniper Networks, Inc.
Topology
In this example, you apply a color-aware, single-rate three-color policer to the input IPv4
traffic at logical interface
ge-2/0/5.0
policer does not apply any packet-filtering. The filter is used only to apply the three-color
policer to the interface.
You configure the policer to rate-limit traffic to a bandwidth limit of 40 Mbps and a
burst-size limit of 100 KB for green traffic but also allow an excess burst-size limit of
200 KB for yellow traffic. Only nonconforming traffic that exceeds the peak burst-size
limit is categorized as red. In this example, you configure the three-color policer action
loss-priority high then discard
loss priority.
The following example requires you to navigate various levels in the configuration
hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration
Mode.
To configure this example, perform the following tasks:
Configuring a Single-Rate Three-Color Policer on page 155
Configuring an IPv4 Stateless Firewall Filter That References the Policer on page 156
Applying the Filter to the Logical Interface on page 157
To quickly configure this example, copy the following configuration commands into a
text file, remove any line breaks, and then paste the commands into the CLI at the
hierarchy level.
set firewall three-color-policer srTCM1-ca single-rate color-aware
set firewall three-color-policer srTCM1-ca single-rate committed-information-rate 40m
set firewall three-color-policer srTCM1-ca single-rate committed-burst-size 100k
set firewall three-color-policer srTCM1-ca single-rate excess-burst-size 200k
set firewall three-color-policer srTCM1-ca action loss-priority high then discard
set firewall family inet filter filter-srtcm1ca-all term 1 then three-color-policer single-rate
srTCM1-ca
set class-of-service interfaces ge-2/0/5 unit 0 forwarding-class af
set interfaces ge-2/0/5 unit 0 family inet address 10.20.130.1/24
set interfaces ge-2/0/5 unit 0 family inet filter input filter-srtcm1ca-all
Configuring a Single-Rate Three-Color Policer
To configure a single-rate three-color policer:
Enable configuration of a three-color policer.
1.
[edit]
user@host# edit firewall
Configure the color mode of the single-rate three-color policer.
2.
[edit firewall three-color-policer srTCM1-ca]
user@host# set single-rate color-aware
Chapter 14: Basic Single-Rate Three-Color Policers
. The IPv4 firewall filter term that references the
, which overrides the implicit marking of red traffic to a
three-color-policer srTCM1-ca
high
[edit]
155