Creating A Two-Rate Rate-Limit Profile - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

JunosE 11.3.x Policy Management Configuration Guide

Creating a Two-Rate Rate-Limit Profile

84
Table 12: Two-Rate Rate-Limit Profile Algorithms (continued)
Step
If Tp(t) >= B and Tc(t) < B
If Tp(t) < B and Tc(t) < B
If incoming packet color is (only occurs in
color-aware operation)
If Tp(t) >= B
If Tp(t) < B
If incoming packet color is red (only occurs
in color aware operation)
To create or modify a two-rate rate-limit profile, use the following commands with the
two-rate keyword:
ip rate-limit-profile command
ipv6 rate-limit-profile command
l2tp rate-limit-profile command
mpls rate-limit-profile command
The following example creates a rate-limit profile named hardlimit9Mb. This rate-limit
profile, when included as part of a rule in a policy list, sets a hard limit on the specified
committed rate with no peak rate or peak burst ability:
host1(config)#ip rate-limit-profile hardlimit9Mb two-rate
host1(config-rate-limit-profile)#committed-rate 9000000
host1(config-rate-limit-profile)#committed-burst 20000
host1(config-rate-limit-profile)#committed-action transmit
host1(config-rate-limit-profile)#conformed-action drop
host1(config-rate-limit-profile)#exceeded-action drop
host1(config-rate-limit-profile)#mask-val 255
The following example modifies the rate-limit profile named hardlimit9Mb to include an
exceeded action that marks the packets that exceed the peak rate. This marking action
sets the DS field in the ToS byte (the six most significant bits) to the decimal value of 7
using a mask value of 0xFC:
host1(config)#ip rate-limit-profile hardlimit9Mb two-rate
host1(config-rate-limit-profile)#exceeded-action mark 7
host1(config-rate-limit-profile)#mask-val 252
Result
Packet is marked as yellow
Tp(t) is decremented by B
Packet is marked as red
–
Packet is marked as yellow
Tp(t) is decremented by B
Packet is marked as red
Packet is marked as red
Copyright © 2010, Juniper Networks, Inc.