Juniper EX9200 Features Manual page 71

Traffic policers feature guide ex series
Hide thumbs Also See for EX9200:
Table of Contents

Advertisement

Table 7: Two-Color Policer Configuration and Application Overview (continued)
Policer Configuration
Physical Interface Policer
Defines traffic rate limiting that applies to all logical interfaces and protocol families configured on a physical interface, even if
the interfaces belong to different routing instances. Can be applied as a firewall filter policer referenced from a physical interface
filter only.
Physical interface policer configuration:
[edit firewall]
policer policer-name {
physical-interface-policer
if-exceeding {
bandwidth-limit bps;
burst-size-limit bytes;
}
then {
discard;
forwarding-class class-name;
loss-priority supported-value;
}
}
Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
Layer 3 Application
Apply as a firewall filter policer referenced from a
physical interface filter that you apply at the
protocol family level:
;
[edit firewall]
family family-name {
filter filter-name {
physical-interface-filter
from {
... match-conditions ...
}
then {
policer policer-name;
}
}
}
[edit interfaces]
interface-name {
unit number {
family family-name {
filter {
input filter-name;
output filter-name;
}
... protocol-configuration ...
}
}
}
Basic Single-Rate Two-Color Policers on page 55
Bandwidth Policers on page 75
Filter-Specific Counters and Policers on page 85
Prefix-Specific Counting and Policing Actions on page 97
Multifield Classification on page 115
Policer Overhead to Account for Rate Shaping in the Traffic Manager on page 135
Two-Color and Three-Color Physical Interface Policers on page 185
Part 3: Configuring Two-Color Traffic Policers at Layer 3
Key Points
Policer configuration:
Include the
physical-interface-policer
statement.
Firewall filter configuration:
;
Include the
physical-interface-filter
statement.
Application:
Apply the filter to the input or
output of a logical interface
at the protocol family level.
Firewall filter policer verification:
Use the
(detail | extensive)
operational mode command.
Use the
filter-name
command.
show interfaces
show firewall filter
operational mode
53

Advertisement

Table of Contents
loading

Table of Contents