Juniper EX9200 Features Manual page 175

Results
Step-by-Step
Procedure
Copyright © 2016, Juniper Networks, Inc.
Note that the term does not specify any match conditions. The firewall filter passes
all packets to the policer.
Confirm the configuration of the firewall filter by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show firewall
family inet {
filter filter-srtcm1ca-all {
term 1 {
then {
three-color-policer {
single-rate srTCM1-ca;
}
}
}
}
}
three-color-policer srTCM1-ca {
action {
loss-priority high then discard;
}
single-rate {
color-aware;
committed-information-rate 40m;
committed-burst-size 100k;
excess-burst-size 200k;
}
}
Applying the Filter to the Logical Interface
To apply the filter to the logical interface:
(MX Series routers only) (Optional) Reclassify all incoming packets on the logical
1.
interface
ge-2/0/5.0
classification.
[edit]
user@host# set class-of-service interfaces ge-2/0/5 unit 0 forwarding-class af
The classifier name can be a configured classifier or one of the default classifiers.
Enable configuration of the logical interface.
2.
[edit]
user@host# edit interfaces ge-2/0/5 unit 0 family inet
Configure an IP address.
3.
[edit interfaces ge-2/0/5 unit 0 family inet]
user@host# set address 10.20.130.1/24
Chapter 14: Basic Single-Rate Three-Color Policers
to assured forwarding, regardless of any preexisting
configuration
show firewall
157