Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Instead of logical-interface-policer, you can use physical-interface-policer. Physical
interface policers are for policers that you reference in firewall filters.
3. (Optional) Reference the policer in a firewall filter, for all traffic types or for a specific
traffic type.
[edit firewall]
user@host# set filter limit-hosts term term1 then three-color-policer single-rate
srTCM1-ca
[edit firewall]
user@host# set family mpls filter limit-hosts term term1 then three-color-policer
single-rate srTCM1-ca
4. Apply the policer to an interface.
If you referenced the policer in a firewall filter, apply the filter to an interface.
[edit interfaces so-1/0/0 unit 0 family inet]
user@host# set filter input srTCM1-ca
On some platforms, you can apply a Layer 2 policer to all traffic types on Gigabit
Ethernet (ge or xe) interfaces. Layer 2 policers must include the logical-interface-policer
statement discussed in Step 2.
[edit interfaces ge-1/0/0 unit 0]
user@host# set layer2-policer input-three-color srTCM1-ca
To apply a policer to outgoing packets, include the output-three-color statement
instead of the input-policer statement.
[edit interfaces ge-1/0/0 unit 0]
user@host# set layer2-policer output-three-color srTCM1-ca
5. For input policers on MX Series platforms only, configure a fixed classifier.
A fixed classifier reclassifies all incoming packets, regardless of any preexisting
classification.
[edit class-of-service interfaces ge-0/0/0]
user@host# set forwarding-class af
The classifier name can be a configured classifier or one of the default classifiers.
6. Verify that the policer is working as expected.
user@host> show interfaces ge-0/0/0.0 detail
user@host> show interfaces ge-0/0/0.0 statistics detail
user@host> show policer
Related
Documentation
• Physical Interface Policers Configuration on page 306
• show interfaces (Gigabit Ethernet) command in the Junos Interfaces Command
Reference
• show interfaces statistics command in the Junos Interfaces Command Reference
• show policer command in the Junos Routing Protocols and Policies Command Reference
288
Copyright © 2010, Juniper Networks, Inc.