Juniper EX9200 Series, Features Manual

Page: 165 / 278

Table 10: Three-Color Policer Configuration and Application Overview (continued)
Key Points Layer 3 Application Policer Configuration
Single-Rate Three-Color Physical Interface Policer
Defines traffic rate limiting that applies to all logical interfaces and protocol families configured on a physical interface, even
if the interfaces belong to different routing instances. Can be applied as a firewall filter policer only.
Policer configuration:
Reference the policer from a physical interface filter
only, and apply the filter to a protocol family on a
logical interface:
[edit firewall]
Physical interface single-rate TCM
policer:
[edit firewall]
three-color-policer policer-name {
physical-interface-policer
;
• Include the
physical-interface-policer
statement.
family family-name {
Firewall filter configuration:
single-rate
{
(color-aware | color-blind);
filter filter-name {
physical-interface-filter
• Include the
physical-interface-filter
statement.
committed-information-rate
bps;
committed-burst-size bytes;
term term-name {
from {
... match-conditions ...
excess-burst-size bytes;
} Application:
}
then {
action {
•
Include the filter (input |
output) filter-name
statement.
three-color-policer
{
single-rate policer-name;
}
}
loss-priority high then discard;
}
}
Verification
}
}
• To verify, use the
show
firewall filter filter-name
operational mode command.
}
[edit interfaces]
interface-name {
unit number {
family family-name {
filter {
input filter-name;
output filter-name;
}
}
}
}
147 Copyright © 2016, Juniper Networks, Inc.
Part 4: Configuring Three-Color Traffic Policers at Layer 3