Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual page 806

JUNOS 10.1 Network Interfaces Configuration Guide
To configure global-level CFM policing, include the
at the
To configure session-level CFM policing, include the
protocols oam ethernet connectivity-fault-management maintenance-domain name level
number maintenance-association name]
The following example shows a CFM policer used for rate-limiting CFM:
This example shows a global level policer, at the CFM level, for rate-limiting CFM.
Case 1: Global-Level
The
CFM Policing
policer
packets of the CFM traffic belonging to all sessions. The
at the
for policing all non-continuity check packets of the CFM traffic belonging to all
sessions. The
specified policer cfm-policer2. If the
cannot specify the previous
This example shows a session-level CFM policer used for rate-limiting CFM. The
Case 2: Session-Level
policer
CFM Policing
md maintenance-association ma
only continuity check packets of the CFM traffic belonging to the specified session.
The
maintenance-domain md maintenance-association ma
policer to use for policing all non-continuity check packets of the CFM traffic belonging
to this session only. The
with the specified policer cfm-policer2. If the
user cannot specify the previous
736
Configuring Rate Limiting of Ethernet OAM Messages
[edit protocols oam ethernet connectivity-fault-management]
[edit]
firewall {
policer cfm-policer {
if-exceeding {
bandwidth-limit 8k;
burst-size-limit 2k;
}
then discard;
}
}
continuity-check cfm-policer
hierarchy level specifies the policer to use for policing all continuity check
connectivity-fault-management policer
all cfm-policer2
[edit protocols oam ethernet]
connectivity-fault-management {
policer {
continuity-check cfm-policer;
other cfm-policer1 ;
# all cfm-policer2;
}
}
statement at the session
statement at the
other cfm-policer1
all cfm-policer2
[edit protocols oam ethernet]
connectivity-fault-management {
maintenance-domain md {
level number;
maintenance-association ma {
policer
policer
hierarchy level.
statement at the global
hierarchy level specifies the policer to use
statement specifies to police all CFM packets with the
option is used, then the user
all policer-name
continuity-check and other
connectivity-fault-management maintenance-domain
hierarchy level specifies the policer to use for policing
connectivity-fault-management
hierarchy level specifies the
statement specifies to police all CFM packets
all policer-name
and
continuity-check
statement and its options
hierarchy level.
statement at the
[edit
connectivity-fault-management
other cfm-policer1 statement
options.
option is used, then the
options.
other