Juniper EX9200 Features Manual page 78

Traffic Policers Feature Guide for EX9200 Switches
Step-by-Step
Procedure
60
The following example requires you to navigate various levels in the configuration
hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration
Mode in the CLI User Guide.
To configure Device R1:
Configure the device interfaces.
1.
[edit interfaces]
user@R1# set ge-2/0/5 description to-Host
user@R1# set ge-2/0/5 unit 0 family inet address 172.16.70.2/30
user@R1# set ge-2/0/8 description to-R2
user@R1# set ge-2/0/8 unit 0 family inet address 10.50.0.1/30
user@R1# set lo0 unit 0 description looback-interface
user@R1# set lo0 unit 0 family inet address 192.168.13.1/32
Apply the firewall filter to interface ge-2/0/5 as an input filter.
2.
[edit interfaces ge-2/0/5 unit 0 family inet]
user@R1# set filter input mf-classifier
Configure the policer to rate-limit to a bandwidth of 700 Mbps and a burst size of
3.
15000 KBps for HTTP traffic (TCP port 80).
[edit firewall policer discard]
user@R1# set if-exceeding bandwidth-limit 700m
user@R1# set if-exceeding burst-size-limit 15k
Configure the policer to discard packets in the red traffic flow.
4.
[edit firewall policer discard]
user@R1# set then discard
Configure the two conditions of the firewall to accept all TCP traffic to port HTTP
5.
(port 80).
[edit firewall family inet filter mf-classifier]
user@R1# set term t1 from protocol tcp
user@R1# set term t1 from port 80
Configure the firewall action to rate-limit HTTP TCP traffic using the policer.
6.
[edit firewall family inet filter mf-classifier]
user@R1# set term t1 then policer discard
At the end of the firewall filter, configure a default action that accepts all other
7.
traffic.
Otherwise, all traffic that arrives on the interface and is not explicitly accepted by
the firewall is discarded.
[edit firewall family inet filter mf-classifier]
user@R1# set term t2 then accept
Configure OSPF.
8.
[edit protocols ospf]
user@R1# set area 0.0.0.0 interface ge-2/0/5.0 passive
user@R1# set area 0.0.0.0 interface lo0.0 passive
user@R1# set area 0.0.0.0 interface ge-2/0/8.0
Copyright © 2016, Juniper Networks, Inc.