Juniper EX9200 Features Manual page 69

Table 7: Two-Color Policer Configuration and Application Overview (continued)
Policer Configuration
Bandwidth Policer
Defines traffic rate limiting that you can apply to Layer 3 protocol-specific traffic at a logical interface, but the bandwidth limit is
specified as a percentage value. Bandwidth can be based on physical interface line rate (the default) or the logical interface shaping
rate. Can be applied as an interface policer or as a firewall filter policer where the filter is either interface-specific or a physical
interface filter.
Bandwidth policer configuration:
[edit firewall]
policer policer-name {
logical-bandwidth-policer
if-exceeding {
(1..100);
bandwidth-percent
burst-size-limit bytes;
}
then {
discard;
forwarding-class class-name;
loss-priority supported-value;
}
}
Copyright © 2016, Juniper Networks, Inc.
Layer 3 Application
Method A—Apply as an interface policer at the
protocol family level:
[edit interfaces]
;
interface-name {
unit unit-number {
family family-name {
policer {
input policer-name;
output policer-name;
}
}
}
}
Method B—Apply as a firewall filter policer at the
protocol family level:
[edit firewall]
family family-name {
filter filter-name {
interface-specific;
from {
... match-conditions ...
}
then {
policer policer-name;
}
}
}
[edit interfaces]
interface-name {
unit unit-number {
family family-name {
filter {
input filter-name;
output filter-name;
}
... protocol-configuration ...
}
}
}
Part 3: Configuring Two-Color Traffic Policers at Layer 3
Key Points
Policer configuration:
Use the
percentage
of the
bandwidth-limit bps
statement.
By default, bandwidth
policing rate-limits traffic
based on a percentage of the
physical interface media rate.
To rate-limit traffic based on
a percentage of the logical
interface configured shaping
rate, also include the
logical-bandwidth-policer
statement.
Firewall filter configuration:
Percentage bandwidth
policers can only be
referenced by filters
configured with the
interface-specific
Interface policer verification:
Use the
(detail | extensive)
operational mode command.
Use the
operational mode command.
Firewall filter policer verification:
Use the
(detail | extensive)
operational mode command.
Use the
filter-name
command.
bandwidth-percent
statement instead
statement.
show interfaces
show policer
show interfaces
show firewall filter
operational mode
51