Juniper EX9200 Features Manual page 89

Step-by-Step
Procedure
Results
Copyright © 2016, Juniper Networks, Inc.
burst-size-limit 5k;
}
then discard;
}
policer p-ftp-10p-500k-discard {
if-exceeding {
bandwidth-percent 10;
burst-size-limit 500k;
}
then discard;
}
policer p-icmp-500k-500k-discard {
if-exceeding {
bandwidth-limit 500k;
burst-size-limit 500k;
}
then discard;
}
Applying the Interface Policer and Firewall Filter Policers to the Logical Interface
To apply the three policers to the VLAN:
Enable configuration of IPv4 on the logical interface.
1.
[edit]
user@host# edit interfaces fe-0/1/1 unit 1 family inet
Apply the firewall filter policers to the interface.
2.
[edit interfaces fe-0/1/1 unit 1 family inet]
user@host# set filter input filter-ipv4-with-limits
Apply the interface policer to the interface.
3.
[edit interfaces fe-0/1/1 unit 1 family inet]
user@host# set policer
Input packets at
fe-0/1/1.0
are evaluated against the firewall filter policers. For more information, see
of Policer and Firewall Filter Operations" on page
Confirm the configuration of the interface by entering the
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
fe-0/1/1 {
vlan-tagging;
unit 0 {
vlan-id 100;
family inet {
address 10.20.15.1/24;
}
}
unit 1 {
Chapter 7: Basic Single-Rate Two-Color Policers
input p-all-1m-5k-discard
are evaluated against the interface policer before they
11.
"Order
show interfaces configuration
71