Juniper EX9200 Series, Features Manual

Page: 163 / 278

PART 4
Configuring Three-Color Traffic Policers
at Layer 3
• Three-Color Policer Configuration Overview on page 145
• Three-Color Policer Configuration Guidelines on page 149
•
Basic Single-Rate Three-Color Policers on page 153
•
Basic Two-Rate Three-Color Policers on page 161
Three-Color Policer Configuration Overview
Table 10 on page 145 describes the hierarchy levels at which you can configure and apply
single-rate tricolor-marking (single-rate TCM) policers and two-rate tricolor-marking
(two-rate TCM) policers to Layer 3 traffic. For information about applying three-color
policers to Layer 2 traffic, see
“Three-Color Policing at Layer 2 Overview” on page 41 .
Table 10: Three-Color Policer Configuration and Application Overview
Key Points Layer 3 Application Policer Configuration
Single-Rate Three-Color Policer
Defines traffic rate limiting that you can apply to Layer 3 protocol-specific traffic at a logical interface. Can be applied as a
firewall filter policer only.
Provides moderate allowances for short periods of traffic that exceed the committed burst size.
Policer configuration:
Reference the policer from a firewall filter, and
apply the filter to a protocol family on a logical
interface:
[edit firewall]
Basic single-rate TCM policer
configuration:
[edit firewall]
three-color-policer policer-name {
single-rate {
•
Include the single-rate
(color-aware | color-blind)
statement.
family family-name {
Firewall filter configuration:
(color-aware | color-blind);
committed-information-rate
bps;
filter filter-name {
term term-name {
from {
• Include the
three-color-policer
single-rate policer-name
action.
committed-burst-size bytes;
excess-burst-size bytes;
... match-conditions ...
}
}
then {
Applying the firewall filter to the
logical interface:
action {
loss-priority high then discard;
}
three-color-policer
{
single-rate policer-name;
}
•
Include the filter (input |
output) filter-name
statement.
}
}
}
}
145 Copyright © 2016, Juniper Networks, Inc.