Juniper EX9200 Features Manual page 192

Traffic Policers Feature Guide for EX9200 Switches
Results
Step-by-Step
Procedure
174
Confirm the configuration of the logical interfaces by entering the
configuration mode command. If the command output does not display the intended
configuration, repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
ge-1/3/1 {
vlan-tagging;
unit 0 {
vlan-id 100;
family inet {
address 10.10.10.1/30;
}
}
unit 1 {
vlan-id 101;
family inet {
address 20.20.20.1/30 {
arp 20.20.20.2 mac 00:00:11:22:33:44;
}
}
}
}
Configuring the Single-Rate Two-Color Policer as a Logical Interface Policer
To configure a single-rate two-color policer as a logical interface policer:
Enable configuration of a single-rate two-color policer.
1.
[edit]
user@host# edit firewall
Specify that the policer is a logical interface (aggregate) policer.
2.
[edit firewall policer policer_IFL]
user@host# set logical-interface-policer
A logical interface policer rate-limits traffic based on a percentage of the media
rate of the physical interface underlying the logical interface to which the policer is
applied. The policer is applied directly to the interface rather than referenced by a
firewall filter.
Specify the policer traffic limits.
3.
a. Specify the bandwidth limit.
To specify the bandwidth limit as an absolute rate, from 8,000 bits per second
through 50,000,000,000 bits per second, include the
statement.
To specify the bandwidth limit as a percentage of the physical port speed on
the interface, include the
policer policer_IFL
bandwidth-percent percent
Copyright © 2016, Juniper Networks, Inc.
show interfaces
bandwidth-limit bps
statement.