Examples: One-Rate Rate-Limit Profile; Figure 6: Congestion Management - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Examples: One-Rate Rate-Limit Profile

Copyright © 2010, Juniper Networks, Inc.
you to accommodate bursts of traffic, but, through coloring, it enables you to identify
which packets are committed and which ones are not.
To enforce ingress data rates below the physical line rate of a port, you can rate limit a
classified packet flow at ingress. A rate-limit profile with a policy rate-limit profile rule
provides this capability. The rate-limit profile defines the attributes of the desired rate.
You can set an action based on one rate or two rates. These actions include drop, transmit,
or mark. The default is to transmit committed and conformed packets, and to drop
exceeded packets.
A color-coded tag is added automatically to each packet based on the following
categories:
Committed—Green
Conformed—Yellow
Exceeded—Red
Figure 6 on page 93 illustrates congestion management.

Figure 6: Congestion Management

A one-rate rate-limit profile can be configured for hard tail drop rate-limit or TCP-friendly
behavior. Packets can be categorized as committed, conformed, or exceeded.
You can configure a one-rate rate-limit profile to hard limit a packet flow to a specified
rate. To rate limit the traffic on an interface from source IP address 1.1.1.1 to 1 Mbps, issue
the following commands:
host1#configure terminal
host1(config)#ip rate-limit-profile oneMegRlp one-rate
host1(config-rate-limit-profile)#committed-rate 1000000
host1(config-rate-limit-profile)#exit
host1(config)#ip classifier-list claclA ip host 1.1.1.1 any
host1(config)#ip policy-list testPolicy
host1(config-policy-list)#classifier-group claclA
host1(config-policy-list-classifier-group)#rate-limit-profile oneMegRlp
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
host1(config)#interface atm 0/0.0
host1(config-subif)#ip policy input testPolicy statistics enabled
You can also configure a one-rate rate-limit profile to provide a TCP-friendly rate limiter.
To configure a rate limiter with TCP-friendly characteristics, we recommend that you set
the committed burst to allow for 1 second of data at the specified rate, and the excess
Chapter 5: Creating Rate-Limit Profiles
93