Two-Color And Three-Color Logical Interface Policers; Logical Interface (Aggregate) Policer Overview; Chapter 16 Two-Color And Three-Color Logical Interface Policers - Juniper EX9200 Features Manual

CHAPTER 16
Two-Color and Three-Color Logical
Interface Policers

Logical Interface (Aggregate) Policer Overview

Copyright © 2016, Juniper Networks, Inc.
Logical Interface (Aggregate) Policer Overview on page 171
Example: Configuring a Two-Color Logical Interface (Aggregate) Policer on page 172
Example: Configuring a Three-Color Logical Interface (Aggregate) Policer on page 177
A logical interface policer—also called an aggregate policer—is a two-color or three-color
policer that defines traffic rate limiting that you can apply to input or output traffic for
multiple protocol families on the same logical interface without creating multiple
instances of the policer.
To configure a single-rate two-color logical interface policer, include the
logical-interface-policer statement at one of the following hierarchy levels:
[edit firewall policer policer-name]
[edit logical-systems logical-system-name firewall
To configure a single-rate or two-rate three-color logical interface policer, include the
statement at one of the following hierarchy levels:
logical-interface-policer
[edit firewall three-color-policer
[edit logical-systems logical-system-name firewall
NOTE: A three-color policer can be applied to Layer 2 traffic as a logical
interface policer only. You cannot apply a three-color policer to Layer 2 traffic
as a physical interface policer (through a firewall filter).
You apply a logical interface policer to Layer 3 traffic directly to the interface configuration
at the logical unit level (to rate-limit all traffic types, regardless of the protocol family)
or at the protocol family level (to rate-limit traffic of a specific protocol family). It is OK
to reference a logical interface policer from a stateless firewall filter term and then apply
the filter to a logical interface.
policer policer-name]
name]
three-color-policer name]
171