Juniper EX9200 Features Manual page 198

Traffic Policers Feature Guide for EX9200 Switches
Results
Step-by-Step
Procedure
180
Configure logical interface
4.
[edit interfaces ge-1/3/1]
user@host# set unit 1 vlan-id 101
user@host# set unit 1 family inet address 20.20.20.1/30 arp 20.20.20.2 mac
00:00:11:22:33:44
Confirm the configuration of the logical interfaces by entering the
configuration mode command. If the command output does not display the intended
configuration, repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
ge-1/3/1 {
vlan-tagging;
unit 0 {
vlan-id 100;
family inet {
address 10.10.10.1/30;
}
}
unit 1 {
vlan-id 101;
family inet {
address 20.20.20.1/30 {
arp 20.20.20.2 mac 00:00:11:22:33:44;
}
}
}
}
Configuring the Two-Rate Three-Color Policer as a Logical Interface Policer
To configure the two-rate three-color policer as a logical interface policer:
Enable configuration of a three-color policer.
1.
[edit]
user@host# edit firewall
Specify that the policer is a logical interface (aggregate) policer.
2.
[edit firewall three-color-policer trTCM2-cb]
user@host# set logical-interface-policer
A logical interface policer rate-limits traffic based on a percentage of the media
rate of the physical interface underlying the logical interface to which the policer is
applied, and the policer is applied directly to the interface rather than referenced
by a firewall filter.
Specify that the policer is two-rate and color-blind.
3.
[edit firewall three-color-policer trTCM2-cb]
user@host# set two-rate color-blind
A color-aware three-color policer takes into account any coloring markings that
might have been set for a packet by another traffic policer configured at a previous
.
ge-1/3/1.0
three-color-policer trTCM2-cb
Copyright © 2016, Juniper Networks, Inc.
show interfaces