Juniper EX9200 Features Manual page 206

Traffic Policers Feature Guide for EX9200 Switches
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
188
The following example requires you to navigate various levels in the configuration
hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration
Mode.
To configure this example, perform the following tasks:
Configuring the Logical Interfaces on the Physical Interface on page 188
Configuring a Physical Interface Policer on page 189
Configuring an IPv4 Physical Interface Filter on page 190
Applying the IPv4 Physical interface Filter to a Physical Interface on page 191
To quickly configure this example, copy the following configuration commands into a
text file, remove any line breaks, and then paste the commands into the CLI at the
hierarchy level.
set interfaces so-1/0/0 unit 0 family inet address 192.168.1.1/24
set interfaces so-1/0/0 unit 0 family vpls
set interfaces so-1/0/0 unit 1 family mpls
set firewall policer shared-policer-A physical-interface-policer
set firewall policer shared-policer-A if-exceeding bandwidth-limit 100m burst-size-limit
500k
set firewall policer shared-policer-A then discard
set firewall family inet filter ipv4-filter physical-interface-filter
set firewall family inet filter ipv4-filter term tcp-police-1 from precedence [ critical-ecp
immediate priority ]
set firewall family inet filter ipv4-filter term tcp-police-1 from protocol tcp
set firewall family inet filter ipv4-filter term tcp-police-1 then policer shared-policer-A
set firewall family inet filter ipv4-filter term tcp-police-2 from precedence [ internet-control
routine ]
set firewall family inet filter ipv4-filter term tcp-police-2 from protocol tcp
set firewall family inet filter ipv4-filter term tcp-police-2 then policer shared-policer-A
set interfaces so-1/0/0 unit 0 family inet filter input ipv4-filter
Configuring the Logical Interfaces on the Physical Interface
To configure the logical interfaces on the physical interface:
Enable configuration of logical interfaces.
1.
[edit]
user@host# edit interfaces so-1/0/0
Configure protocol families on logical unit 0.
2.
[edit interfaces so-1/0/0]
user@host# set unit 0 family inet address 192.168.1.1/24
user@host# set unit 0 family vpls
Configure protocol families on logical unit 1.
3.
[edit interfaces so-1/0/0]
user@host# set unit 1 family mpls
Copyright © 2016, Juniper Networks, Inc.
[edit]