Example: Configuring A Two-Color Logical Interface (Aggregate) Policer - Juniper EX9200 Features Manual

Traffic Policers Feature Guide for EX9200 Switches
Related
Documentation

Example: Configuring a Two-Color Logical Interface (Aggregate) Policer

Requirements
Overview
172
You can apply a logical interface policer to unicast traffic only. For information about
configuring a stateless firewall filter for flooded traffic, see "Applying Forwarding Table
Filters" in the "Traffic Sampling, Forwarding, and Monitoring" section of the Routing
Policies, Firewall Filters, and Traffic Policers Feature Guide.
To display a logical interface policer on a particular interface, issue the
operational mode command.
policers
Two-Color Policer Configuration Overview on page 49
Three-Color Policer Configuration Overview on page 145
Example: Configuring a Two-Color Logical Interface (Aggregate) Policer on page 172
Example: Configuring a Three-Color Logical Interface (Aggregate) Policer on page 42
interface-specific (Firewall Filters)
logical-interface-policer on page 222
This example shows how to configure a single-rate two-color policer as a logical interface
policer and apply it to incoming IPv4 traffic on a logical interface.
Requirements on page 172
Overview on page 172
Configuration on page 173
Verification on page 176
Before you begin, make sure that the logical interface to which you apply the two-color
logical interface policer is hosted on a Gigabit Ethernet interface (
Ethernet interface ( ).
xe-
In this example, you configure the single-rate two-color policer
interface policer and apply it to incoming IPv4 traffic at logical interface
Topology
If the input IPv4 traffic on the physical interface
equal to 90 percent of the media rate with a 300 KB burst-size limit, then the logical
interface policer
policer_IFL
ge-1/3/1.0 . Configure the policer to mark nonconforming traffic by setting packet loss
priority (PLP) levels to
high
As the incoming IPv4 traffic rate on the physical interface slows and conforms to the
configured limits, Junos OS stops marking the incoming IPv4 packets at the logical
interface.
ge-1/3/1
rate-limits the input IPv4 traffic on the logical interface
and classifying packets as
show interfaces
ge- ) or a 10-Gigabit
as a logical
policer_IFL
ge-1/3/1.0
exceeds the bandwidth limit
.
best-effort
Copyright © 2016, Juniper Networks, Inc.
.