Juniper EX9200 Features Manual page 123

Step-by-Step
Procedure
Results
Copyright © 2016, Juniper Networks, Inc.
}
filter limit-source-one-24 {
term one {
from {
source-address {
10.10.10.0/24;
}
}
then prefix-action psa-1Mbps-per-source-24-32-256;
}
}
}
Applying the Firewall Filter to IPv4 Input Traffic at a Logical Interface
To apply the firewall filter to IPv4 input traffic at a logical interface:
Enable configuration of IPv4 on the logical interface.
1.
[edit]
user@host# edit interfaces so-0/0/2 unit 0 family inet
Configure an IP address.
2.
[edit interfaces so-0/0/2 unit 0 family inet]
user@host# set address 10.39.1.1/16
Apply the IPv4 standard stateless firewall filter.
3.
[edit interfaces so-0/0/2 unit 0 family inet]
user@host# set filter input limit-source-one-24
Confirm the configuration of the prefix-specific action by entering the
configuration mode command. If the command output does not display the intended
configuration, repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
so-0/0/2 {
unit 0 {
family inet {
filter {
input limit-source-one-24;
}
address 10.39.1.1/16;
}
}
}
If you are done configuring the device, enter
Chapter 10: Prefix-Specific Counting and Policing Actions
from configuration mode.
commit
show interfaces
105