Juniper EX9200 Series, Features Manual

Page: 145 / 278

address 192.168.1.1/24;
}
}
}
If you are done configuring the device, enter
commit
from configuration mode.
Verification
Confirm that the configuration is working properly.
Displaying the Number of Packets Processed by the Policer at the Logical Interface
Purpose Verify the traffic flow through the logical interface and that the policer is evaluated when
packets are received on the logical interface.
Action Use the
show firewall
operational mode command for the filter you applied to the logical
interface.
user@host> show firewall filter rate-limit-in
Filter: rate-limit-in
Policers:
Name Packets
ef-policer-isp2-customers 32863
af-policer-other-customers 3870
The command output lists the policers applied by the firewall filter
rate-limit-in
, and the
number of packets that matched the filter term.
NOTE: The packet count includes the number of out-of-specification
(out-of-spec) packet counts, not all packets policed by the policer.
The policer name is displayed concatenated with the name of the firewall filter term in
which the policer is referenced as an action.
Related
Documentation
Two-Color Policer Configuration Overview on page 49
•
•
Multifield Classification Overview on page 115
•
Multifield Classification Requirements and Restrictions on page 118
•
Multifield Classification Limitations on M Series Routers on page 119
• tri-color
statement
Example: Configuring and Applying a Firewall Filter for a Multifield Classifier
This example shows how to configure a firewall filter to classify traffic using a multifield
classifier. The classifier detects packets of interest to class of service (CoS) as they arrive
on an interface. Multifield classifiers are used when a simple behavior aggregate (BA)
127 Copyright © 2016, Juniper Networks, Inc.
Chapter 11: Multifield Classification