Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual page 865

For more information about configuring tricolor policer markings, see the JUNOS
Policy Framework Configuration Guide and the JUNOS Class of Service Configuration
Guide.
Applying a Policer
Apply a two-color policer or tricolor policer to a logical interface to prevent traffic on
the interface from consuming bandwidth inappropriately. To apply two-color or
tricolor policers, include the
You can include these statements at the following hierarchy levels:
Use the
logical interface and the
the
logical interface and the
specified policers must be configured at the
interface, you can configure a three-color policer or two-color input policer or output
policers—you cannot configure both a three-color policer and a two-color policer.
Example: Configuring and Applying a Policer
Configure tricolor policers and apply them to an interface:
layer2-policer {
input-policer policer-name;
input-three-color policer-name;
output-policer policer-name;
policer-name;
}
[edit interfaces interface-name unit logical-unit-number]
[edit logical-systems logical-system-name interfaces interface-name unit
logical-unit-number]
statement to apply a two-color policer to received packets on a
input-policer
input-three-color
output-policer statement to apply a two-color policer to transmitted packets on a
output-three-color
[edit firewall]
three-color-policer three-color-policer-color-blind {
logical-interface-policer;
two-rate {
color-blind;
committed-information-rate 1500000;
committed-burst-size 150;
peak-information-rate 3;
peak-burst-size 300;
}
}
three-color-policer three-color-policer-color-aware {
logical-interface-policer;
two-rate {
color-aware;
committed-information-rate 1500000;
committed-burst-size 150;
peak-information-rate 3;
Configuring Gigabit Ethernet Two-Color and Tricolor Policers
Chapter 48: Configuring Gigabit Ethernet Accounting and Policing
statement:
layer2-policer
statement to apply a tricolor policer. Use
statement to apply a tricolor policer. The
[edit firewall] hierarchy level. For each
795