Juniper J2300 User Manual page 436

J-series™ Services Router User Guide
Table 158: Configuring Policers for TCP and ICMP
Task
Navigate to the Firewall
level in the configuration
hierarchy.
Define
tcp-connection-policer
and set its rate limits.
You can use the following
abbreviations when
specifying the bandwidth
limit:
k (1000)
m (1,000,000)
g (1,000,000,000)
Define the policer action
for tcp-connection-policer.
406
Configuring a Stateless Firewall Filter with a Configuration Editor
J-Web Configuration Editor
In the configuration editor hierarchy, select
Firewall.
1. Next to Policer, click Add new entry.
2.
In the Policer name box, type
tcp-connection-policer.
3.
Next to Filter specific, select the check
box.
4.
Next to If Exceeding, select the check box
and click Configure.
5. In the Burst size limit box, type 15k.
The burst size limit can be from 1,500
through 100,000,000 bytes.
6.
In the Bandwidth drop-down list, select
Bandwidth limit.
7.
In the Bandwidth limit box, type 500k.
The bandwidth limit can be from 32,000
through 32,000,000,000 bps.
8. Click OK.
1. On the Policer tcp-connection-policer
page, next to Then, click Configure.
2. Next to Discard, select the check box.
3. Click OK twice.
CLI Configuration Editor
From the top of the configuration hierarchy,
enter edit firewall.
Set the policer name and its rate limits:
set policer tcp-connection-policer
filter-specific if-exceeding burst-size-limit 15k
bandwidth-limit 500k
Set the policer action:
set policer tcp-connection-policer then discard