Applying Aggregate Policers - Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual

JUNOS 10.1 Network Interfaces Configuration Guide
If you apply both policers and firewall filters to an interface, input policers are
evaluated before input firewall filters, and output policers are evaluated after output
firewall filters.
If you apply the policer to the interface
transmitted by the Routing Engine.
On T Series, M120, and M320 platforms, if the interfaces are on the same FPC, the
filters or policers do not act on the sum of traffic entering and exiting the interfaces.
For more information about policers, see the JUNOS Policy Framework Configuration
Guide.
This section includes the following topics:

Applying Aggregate Policers

By default, if you apply a policer to multiple protocol families on the same logical
interface, the policer restricts traffic for each protocol family individually. For example,
a policer with a 50 Mbps bandwidth limit applied to both IPv4 and IPv6 traffic would
allow the interface to accept 50 Mbps of IPv4 traffic and 50 Mbps of IPv6 traffic. If
you apply an aggregate policer, the policer would allow the interface to receive only
50 Mbps of IPv4 and IPv6 traffic combined.
To configure an aggregate policer, include the
the
For the policer to be treated as an aggregate, you must apply it to multiple protocol
families on a single logical interface by including the
You can include these statements at the following hierarchy levels:
In the
The protocol families on which you do not apply the policer are not affected by the
policer. For example, if you configure a single logical interface to accept MPLS, IPv4,
202
Applying Policers
Applying Aggregate Policers on page 202
Applying Hierarchical Policers on Enhanced Intelligent Queuing PICs on page 204
[edit firewall policer policer-template-name]
[edit firewall policer policer-template-name]
logical-interface-policer;
policer {
arp policer-template-name;
input policer-template-name;
output policer-template-name;
}
[edit interfaces interface-name unit logical-unit-number family family]
[edit logical-systems logical-system-name interfaces interface-name unit
logical-unit-number family family]
statement, the protocol family can be
family
, it is applied to packets received or
lo0
logical-interface-policer
hierarchy level:
statement:
policer
, ,
ccc inet inet6
statement at
, , , or .
mpls tcc vpls