Juniper EX9200 Features Manual page 63

Results
Step-by-Step
Procedure
Copyright © 2016, Juniper Networks, Inc.
Configure logical interface
4.
[edit interfaces ge-1/3/1]
user@host# set unit 1 vlan-id 101
user@host# set unit 1 family inet address 20.20.20.1/30 arp 20.20.20.2 mac
00:00:11:22:33:44
Confirm the configuration of the logical interfaces by entering the
configuration mode command. If the command output does not display the intended
configuration, repeat the instructions in this procedure to correct the configuration.
[edit]
user@host# show interfaces
ge-1/3/1 {
vlan-tagging;
unit 0 {
vlan-id 100;
family inet {
address 10.10.10.1/30;
}
}
unit 1 {
vlan-id 101;
family inet {
address 20.20.20.1/30 {
arp 20.20.20.2 mac 00:00:11:22:33:44;
}
}
}
}
Configuring the Two-Rate Three-Color Policer as a Logical Interface Policer
To configure the two-rate three-color policer as a logical interface policer:
Enable configuration of a three-color policer.
1.
[edit]
user@host# edit firewall
Specify that the policer is a logical interface (aggregate) policer.
2.
[edit firewall three-color-policer trTCM2-cb]
user@host# set logical-interface-policer
A logical interface policer rate-limits traffic based on a percentage of the media
rate of the physical interface underlying the logical interface to which the policer is
applied, and the policer is applied directly to the interface rather than referenced
by a firewall filter.
Specify that the policer is two-rate and color-blind.
3.
[edit firewall three-color-policer trTCM2-cb]
user@host# set two-rate color-blind
A color-aware three-color policer takes into account any coloring markings that
might have been set for a packet by another traffic policer configured at a previous
Chapter 6: Two-Color and Three-Color Policers at Layer 2
.
ge-1/3/1.0
three-color-policer trTCM2-cb
show interfaces
45