Juniper EX9200 Features Manual page 5

Part 3
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Copyright © 2016, Juniper Networks, Inc.
Statement Hierarchy for Applying a Three-Color Policer to Layer 2
Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Example: Configuring a Three-Color Logical Interface (Aggregate) Policer . . . . . 42
Configuring Two-Color Traffic Policers at Layer 3
Two-Color Policer Configuration Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Basic Single-Rate Two-Color Policers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Single-Rate Two-Color Policer Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Example: Limiting Inbound Traffic at Your Network Border by Configuring an
Ingress Single-Rate Two-Color Policer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Example: Configuring Interface and Firewall Filter Policers at the Same
Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Bandwidth Policers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Bandwidth Policer Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Guidelines for Configuring a Bandwidth Policer . . . . . . . . . . . . . . . . . . . . . . . . 75
Guidelines for Applying a Bandwidth Policer . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Example: Configuring a Logical Bandwidth Policer . . . . . . . . . . . . . . . . . . . . . . . . 76
Filter-Specific Counters and Policers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Filter-Specific Policer Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Example: Configuring a Stateless Firewall Filter to Protect Against TCP and
ICMP Floods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Prefix-Specific Counting and Policing Actions . . . . . . . . . . . . . . . . . . . . . . . . 97
Prefix-Specific Counting and Policing Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Separate Counting and Policing for Each IPv4 Address Range . . . . . . . . . . . . 97
Prefix-Specific Action Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Counter and Policer Set Size and Indexing . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Filter-Specific Counter and Policer Set Overview . . . . . . . . . . . . . . . . . . . . . . . . . 100
Example: Configuring Prefix-Specific Counting and Policing . . . . . . . . . . . . . . . . 100
Prefix-Specific Counting and Policing Configuration Scenarios . . . . . . . . . . . . . . 107
Prefix Length of the Action and Prefix Length of Addresses in Filtered
Packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Scenario 1: Firewall Filter Term Matches on Multiple Addresses . . . . . . . . . . 109
Scenario 2: Subnet Prefix Is Longer Than the Prefix in the Filter Match
Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Scenario 3: Subnet Prefix Is Shorter Than the Prefix in the Firewall Filter
Match Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Multifield Classification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Multifield Classification Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Forwarding Classes and PLP Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Multifield Classification and BA Classification . . . . . . . . . . . . . . . . . . . . . . . . 115
Multifield Classification Used In Conjunction with Policers . . . . . . . . . . . . . . 116
Multifield Classification Requirements and Restrictions . . . . . . . . . . . . . . . . . . . . 118
Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
CoS Tricolor Marking Requirement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Table of Contents
v