Juniper EX9200 Features Manual page 207

Results
Step-by-Step
Procedure
Results
Copyright © 2016, Juniper Networks, Inc.
Confirm the configuration of the firewall filter by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
so-1/0/0 {
unit 0 {
family inet {
address 192.168.1.1/24;
}
family vpls;
}
unit 1 {
family mpls;
}
}
Configuring a Physical Interface Policer
To configure a physical interface policer:
Enable configuration of the two-color policer.
1.
[edit]
user@host# edit firewall
Configure the type of two-color policer.
2.
[edit firewall policer shared-policer-A]
user@host# set physical-interface-policer
Configure the traffic limits and the action for packets in a nonconforming traffic
3.
flow.
[edit firewall policer shared-policer-A]
user@host# set if-exceeding bandwidth-limit
user@host# set then discard
For a physical interface filter, the actions you can configure for packets in a
nonconforming traffic flow are to discard the packets, assign a forwarding class,
assign a PLP value, or assign both a forwarding class and a PLP value.
Confirm the configuration of the policer by entering the
command. If the command output does not display the intended configuration, repeat
the instructions in this procedure to correct the configuration.
[edit]
user@host# show firewall
policer shared-policer-A {
physical-interface-policer;
if-exceeding {
bandwidth-limit 100m;
burst-size-limit 500k;
}
then discard;
}
Chapter 17: Two-Color and Three-Color Physical Interface Policers
policer shared-policer-A
100m
show firewall
configuration
show interfaces
burst-size-limit 500k
configuration mode
189