Three-Color Policing At Layer 2 Overview; Guidelines For Configuring Three-Color Policing Of Layer 2 Traffic; Statement Hierarchy For Configuring A Three-Color Policer For Layer; Traffic - Juniper EX9200 Features Manual

Three-Color Policing at Layer 2 Overview

Guidelines for Configuring Three-Color Policing of Layer 2 Traffic

Statement Hierarchy for Configuring a Three-Color Policer for Layer 2 Traffic
Copyright © 2016, Juniper Networks, Inc.
This topic covers the following information:
Guidelines for Configuring Three-Color Policing of Layer 2 Traffic on page 41
Statement Hierarchy for Configuring a Three-Color Policer for Layer 2 Traffic on page 41
Statement Hierarchy for Applying a Three-Color Policer to Layer 2 Traffic on page 42
The following guidelines apply to three-color policing of Layer 2 traffic:
You can apply a three-color policer to Layer 2 traffic at a logical interface hosted on a
Gigabit Ethernet interface (
A single logical interface supports Layer 2 policing in both directions.
You can apply a three-color policer to Layer 2 traffic as a logical interface policer only.
You cannot apply a two-color policer to Layer 2 traffic as a stateless firewall filter
action.
You can apply a three-color policer to Layer 2 traffic by referencing the policer in the
interface configuration at the logical unit level, and not at the protocol level.
You can apply a color-aware three-color policer to Layer 2 traffic in the egress direction
only, but you apply a color-blind three-color policer to Layer 2 traffic in either direction.
For information about configuring two-color policing of Layer 2 traffic, see
Policing at Layer 2 Overview" on page
To enable a single-rate or two-rate three-color policer to rate-limit Layer 2 traffic, include
the logical-interface-policer
firewall {
three-color-policer policer-name {
action {
loss-priority high then discard;
}
logical-interface-policer;
single-rate {
(color-aware | color-blind);
committed-burst-size bytes;
committed-information-rate bps;
excess-burst-size bytes;
}
two-rate {
(color-aware | color-blind);
committed-burst-size bytes;
committed-information-rate bps;
peak-burst-size bytes;
peak-information-rate bps;
}
Chapter 6: Two-Color and Three-Color Policers at Layer 2
) or a 10-Gigabit Ethernet interface (
ge-
39.
statement in the three-color-policer
) only.
xe-
"Two-Color
configuration.
41