Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
if-exceeding {
bandwidth-limit 701k;
burst-size-limit 70k;
}
then discard;
}
family inet {
filter fred {
term one {
from {
source-address 11.1.0.0/16;
}
then {
log;
reject host-unknown;
}
}
}
}
}
If, however, the [edit logical-systems logical-system-name] hierarchy does not contain
any firewall statements, then the main firewall configuration is used for any filter or policer
references. For example, the following configuration is also allowed:
[edit]
logical-systems {
ls1 {
interfaces {
fe-0/3/2 {
unit 0 {
family inet {
filter {
input-list [ filter1 fred ];
}
}
}
}
}
}
}
firewall {
policer pol1 {
if-exceeding {
bandwidth-limit 701k;
burst-size-limit 70k;
}
then discard;
}
family inet {
filter fred {
term one {
from {
source-address 11.1.0.0/16;
}
then {
260
Copyright © 2010, Juniper Networks, Inc.