Juniper EX9200 Series, Features Manual

Page: 175 / 278

Note that the term does not specify any match conditions. The firewall filter passes
all packets to the policer.
Results Confirm the configuration of the firewall filter by entering the show firewall configuration
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host#
show firewall
family inet {
filter filter-srtcm1ca-all {
term 1 {
then {
three-color-policer {
single-rate srTCM1-ca;
}
}
}
}
}
three-color-policer srTCM1-ca {
action {
loss-priority high then discard;
}
single-rate {
color-aware;
committed-information-rate 40m;
committed-burst-size 100k;
excess-burst-size 200k;
}
}
Applying the Filter to the Logical Interface
Step-by-Step
Procedure
To apply the filter to the logical interface:
(MX Series routers only) (Optional) Reclassify all incoming packets on the logical
interface
ge-2/0/5.0 to assured forwarding, regardless of any preexisting
classification.
[edit]
1.
user@host# set class-of-service interfaces ge-2/0/5 unit 0 forwarding-class af
The classifier name can be a configured classifier or one of the default classifiers.
2.
Enable configuration of the logical interface.
[edit]
user@host#
edit interfaces ge-2/0/5 unit 0 family inet
3.
Configure an IP address.
[edit interfaces ge-2/0/5 unit 0 family inet]
user@host#
set address 10.20.130.1/24
157 Copyright © 2016, Juniper Networks, Inc.
Chapter 14: Basic Single-Rate Three-Color Policers