Juniper EX9200 Features Manual page 184

Traffic Policers Feature Guide for EX9200 Switches
Step-by-Step
Procedure
Results
Verification
Purpose
Action
166
Applying the Filter to a Logical Interface at the Protocol Family Level
To apply the filter to the logical interface at the protocol family level:
Enable configuration of an IPv4 firewall filter.
1.
[edit]
user@host# edit interfaces ge-2/0/5 unit 0 family inet
Apply the policer to the logical interface at the protocol family level.
2.
[edit interfaces ge-2/0/5 unit 0 family inet]
user@host# set address 10.10.10.1/30
user@host# set filter input filter-trtcm1ca-all
(MX Series routers and EX Series switches only) (Optional) For input policers, you
3.
can configure a fixed classifier. A fixed classifier reclassifies all incoming packets,
regardless of any preexisting classification.
[edit]
user@host# set class-of-service interfaces ge-2/0/5 forwarding-class af
The classifier name can be a configured classifier or one of the default classifiers.
Confirm the configuration of the interface by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
ge-2/0/5 {
unit 0 {
family inet {
address 10.10.10.1/30;
filter {
input filter-trtcm1ca-all;
}
}
}
}
If you are done configuring the device, enter
Confirm that the configuration is working properly.
Displaying the Firewall Filters Applied to the Logical Interface on page 166
Displaying the Firewall Filters Applied to the Logical Interface
Verify that the firewall filter is applied to IPv4 input traffic at the logical interface.
Use the operational mode command for the logical interface
show interfaces
and specify mode. The Protocol inet section of the command output displays IPv4
detail
show interfaces
from configuration mode.
commit
Copyright © 2016, Juniper Networks, Inc.
configuration
,
ge-2/0/5.0