Rate-Limiting Traffic Flows - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Rate-Limiting Traffic Flows

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
In the following example, interface ATM 3/1.1 classifies on three traffic flows from different
sources. Each traffic flow is rate limited to 1MB (which is defined by the rate-limit profile
rl1Meg).
host1(config)#ip classifier-list clFlow1 ip host 10.1.1.1 any
host1(config)#ip classifier-list clFlow2 ip host 10.1.1.2 any
host1(config)#ip classifier-list clFlow3 ip host 10.1.1.3 any
host1(config)#ip policy-list plRateLimit
host1(config-policy-list)#classifier-group clFlow1
host1(config-policy-list-classifier-group)#rate-limit-profile rl1Meg
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group clFlow2
host1(config-policy-list-classifier-group)#rate-limit-profile rl1Meg
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group clFlow3
host1(config-policy-list-classifier-group)#rate-limit-profile rl1Meg
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
host1(config)#interface atm 3/1.1
host1(config-subif)#ip policy input plRateLimit statistics enabled
host1(config-subif)#exit
In the following example, interface ATM 3/1.1 again classifies on three traffic flows;
however, this policy rate limits the aggregate of the three flows to 1 MB.
host1(config)#ip classifier-list clFlowAll ip host 10.1.1.1 any
host1(config)#ip classifier-list clFlowAll ip host 10.1.1.2 any
host1(config)#ip classifier-list clFlowAll ip host 10.1.1.3 any
host1(config)#ip policy-list plRateLimit
host1(config-policy-list)#classifier-group clFlowAll
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
host1(config)#interface atm 3/1.1
host1(config-subif)#ip policy input plRateLimit statistics enabled
host1(config-subif)#exit
You can rate limit traffic flows destined for an SRP module by implementing a token
bucket policer. The configured rate limits are stored in NVS and persist across reboots.
Rate Limits for Interfaces Overview on page 58
Monitoring Policy Management Overview on page 173
control-plane
policer
Chapter 5: Creating Rate-Limit Profiles
95