Configuring A Vpls Filter - Juniper EX9200 Features Manual

VPLS Feature Guide for EX9200 Switches

Configuring a VPLS Filter

86
the filter. Policers allow you to limit the amount of traffic that passes into or out of an
interface.
VPLS filters and policers act on a Layer 2 frame that includes the media access control
(MAC) header (after any VLAN rewrite or other rules are applied), but does not include
the cyclical redundancy check (CRC) field.
You can apply VPLS filters and policers on the PE router to customer-facing interfaces
only.
NOTE: In the VPLS documentation, the word router in terms such as PE router
is used to refer to any device that provides routing functions.
NOTE: The behavior of firewall filters processing with MAC addresses differs
between DPCs and MPCs. On MPCs, interface filters are always applied before
MAC learning occurs. The input forwarding table filter is applied after MAC
learning is completed. However, on DPCs, MAC learning occurs independently
of the application of filters. If the CE-facing interface of the PE where the
firewall filter is applied is an MPC, then the MAC entry times out and is never
learned again. However, if the CE-facing interface of the PE where the firewall
filter is applied is an DP, then the MAC entry is not timed out and if the MAC
address entry is manually cleared, it is relearned.
The following sections explain how to configure filters and policers for VPLS:
Configuring a VPLS Filter on page 86
Configuring a VPLS Policer on page 89
To configure a filter for VPLS, include the
hierarchy level:
[edit firewall family vpls]
filter filter-name {
interface-specific;
term term-name {
from {
match-conditions;
}
then {
actions;
}
}
}
For more information about how to configure firewall filters, see the Routing Policies,
Firewall Filters, and Traffic Policers Feature Guide. For information on how to configure a
filter statement at the [edit firewall family vpls]
Copyright © 2016, Juniper Networks, Inc.