Juniper JUNOS OS 10.4 Manual page 117

Copyright © 2012, Juniper Networks, Inc.
NOTE: This example does not present exhaustive configuration listings for
all routers in the figures. However, you can use this example with a broader
configuration strategy to complete the MX Series router network Ethernet
Operations, Administration, and Maintenance (OAM) configurations.
To configure policing and marking of traffic entering a VPLS core:
Configure
policer bcast-unknown-unicast-non-ip-mcast-policer
1.
limit the aggregate broadcast, unknown unicast, and non-IP multicast to 50 kbps:
[edit firewall]
policer bcast-unknown-unicast-non-ip-mcast-policer {
if-exceeding {
bandwidth-limit 50k;
burst-size-limit 150k;
}
then loss-priority high;
}
Configure
three-color-policer ip-multicast-traffic-policer
2.
the IP multicast traffic:
[edit firewall]
three-color-policer ip-multicast-traffic-policer {
two-rate {
color-blind;
committed-information-rate 4m;
committed-burst-size 256k;
peak-information-rate 4100000;
peak-burst-size 256k;
}
}
Configure customer-1 , a firewall filter that uses the two policers to limit and mark
3.
customer traffic. The first term marks the IP multicast traffic based on the destination
MAC address, and the second term polices the broadcast, unknown unicast, and
non-IP multicast traffic:
[edit firewall]
family vpls {
filter customer-1 {
term t0 {
from {
destination-mac-address {
01:00:5e:00:00:00/24;
}
}
then {
three-color-policer {
two-rate ip-multicast-traffic-policer;
}
forwarding-class expedited-forwarding;
}
}
term t1 {
Chapter 9: Layer 2 Firewall Filters
, a firewall policer to
, a three-color policer to limit
97