Juniper EX9200 Features Manual page 208

Traffic Policers Feature Guide for EX9200 Switches
Step-by-Step
Procedure
Results
190
Configuring an IPv4 Physical Interface Filter
To configure a physical interface policer as the action for terms in an IPv4 physical
interface policer:
Configure a standard stateless firewall filter under a specific protocol family.
1.
[edit]
user@host# edit firewall family inet filter ipv4-filter
You cannot configure a physical interface firewall filter for
Configure the filter as a physical interface filter so that you can apply the physical
2.
interface policer as an action.
[edit firewall family inet filter ipv4-filter]
user@host# set physical-interface-filter
Configure the first term to match IPv4 packets received through TCP with the IP
3.
precedence fields critical-ecp
interface policer as a filter action.
[edit firewall family inet filter ipv4-filter]
user@host# set term tcp-police-1 from precedence [ critical-ecp immediate priority
]
user@host# set term tcp-police-1 from protocol tcp
user@host# set term tcp-police-1 then policer shared-policer-A
Configure the first term to match IPv4 packets received through TCP with the IP
4.
precedence fields internet-control
policer as a filter action.
[edit firewall family inet filter ipv4-filter]
user@host# set term tcp-police-2 from precedence [ internet-control routine ]
user@host# set term tcp-police-2 from protocol tcp
user@host# set term tcp-police-2 then policer shared-policer-A
Confirm the configuration of the firewall filter by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show firewall
family inet {
filter ipv4-filter {
physical-interface-filter;
term tcp-police-1 {
from {
precedence [ critical-ecp immediate priority ];
protocol tcp;
}
then policer shared-policer-A;
}
term tcp-police-2 {
from {
precedence [ internet-control routine ];
protocol tcp;
, immediate , or priority and to apply the physical
or routine and to apply the physical interface
Copyright © 2016, Juniper Networks, Inc.
family any .
configuration
show firewall