Juniper EX9200 Features Manual page 174

Traffic Policers Feature Guide for EX9200 Switches
Results
Step-by-Step
Procedure
156
Configure the single-rate guaranteed traffic limits.
3.
[edit firewall three-color-policer srTCM1-ca]
user@host# set single-rate
user@host# set single-rate
Configure the single-rate burst-size limit that is used to classify nonconforming
4.
traffic.
[edit firewall three-color-policer srTCM1-ca]
user@host# set single-rate
(Optional) Configure the action for nonconforming traffic.
5.
[edit firewall three-color-policer srTCM1-ca]
user@host# set action loss-priority high then discard
For three-color policers, the only configurable action is to discard packets in a red
traffic flow. In this example, packets in a red traffic flow have been implicitly marked
with a packet loss priority (PLP) level because the traffic flow exceeded the
high
rate-limiting defined by the single rate-limit (specified by the
committed-information-rate 40m
by the excess-burst-size 200k
is included, this example takes the more severe action of discarding packets in a
red traffic flow.
Confirm the configuration of the hierarchical policer by entering the
configuration command. If the command output does not display the intended
configuration, repeat the instructions in this procedure to correct the configuration.
three-color-policer srTCM1-ca {
action {
loss-priority high then discard;
}
single-rate {
color-aware;
committed-information-rate 40m;
committed-burst-size 100k;
excess-burst-size 200k;
}
}
Configuring an IPv4 Stateless Firewall Filter That References the Policer
To configure a standard stateless firewall filter that references the policer:
Enable configuration of an IPv4 standard stateless firewall filter.
1.
[edit]
user@host# edit firewall family inet filter filter-srtcm1ca-all
Specify the filter term that references the policer.
2.
[edit firewall family inet filter filter-srtcm1ca-all]
user@host# set term 1 then
committed-information-rate
committed-burst-size 100k
excess-burst-size 200k
statement) and the larger burst-size limit (specified
statement). Because the optional
three-color-policer single-rate srTCM1-ca
Copyright © 2016, Juniper Networks, Inc.
40m
action statement
show firewall