Firewall Filter Match Conditions For Vpls Traffic - Juniper EX9200 Features Manual

VPLS Feature Guide for EX9200 Switches
Related
Documentation

Firewall Filter Match Conditions for VPLS Traffic

90
policer policer-name {
bandwidth-limit limit;
burst-size-limit limit;
then action;
}
To apply a VPLS policer to an interface, include the
policer {
input input-policer-name;
output output-policer-name;
}
You can include this statement at the following hierarchy levels:
[edit interfaces interface-name unit number family vpls]
[edit logical-systems logical-system-name interfaces interface-name unit number
family vpls
NOTE: ACX Series routers do not support the
In the input statement, list the name of the VPLS policer to be evaluated when packets
are received on the interface. In the
to be evaluated when packets are transmitted on the interface. This type of VPLS policer
can only apply to unicast packets. For information about how to filter flood packets, see
"Configuring a Filter for Flooded Traffic" on page
Routing Policies, Firewall Filters, and Traffic Policers Feature Guide
Firewall Filter Match Conditions for VPLS Traffic on page 90
In the from statement in the VPLS filter term, you specify conditions that the packet must
match for the action in the
statement must match for the action to be taken. The order in which you specify match
conditions is not important, because a packet must match all the conditions in a term
for a match to occur.
If you specify no match conditions in a term, that term matches all packets.
An individual condition in a
can specify numeric ranges. You can also specify multiple source addresses or destination
addresses. When a condition defines a list of values, a match occurs if one of the values
in the list matches the packet.
Individual conditions in a
from
you are defining an explicit mismatch. For example, the negated match condition for
is
forwarding-class forwarding-class-except
policer
statement, list the name of the VPLS policer
output
89.
statement to be taken. All conditions in the
then
statement can contain a list of values. For example, you
from
statement can be negated. When you negate a condition,
. If a packet matches a negated condition, it
statement:
[edit logical-systems] hierarchy.
from
Copyright © 2016, Juniper Networks, Inc.