Policy Framework Configuration Guide - Juniper Networks

Chapter 11: Policer Configuration
}
}
}
}
To use this classifier, you must configure the settings for the expedited-forwarding
forwarding class at the [edit class-of-service forwarding-classes queue queue-number
expedited-forwarding] hierarchy level.
NOTE: Because the policer is executed before the filter, if an input policer is
also configured on the logical interface, it cannot use the forwarding class
and PLP of a multifield classifier associated with the interface.
For more information about forwarding class and loss priority, see the Junos OS Class of
Service Configuration Guide. For more information about policers, see the following
sections:
• Configuring Filter-Specific Policers on page 297
• Configuring Policer Actions for Specific Address Prefixes on page 297
• Examples: Classifying Traffic on page 302
Configuring Filter-Specific Policers
You can configure filter-specific policers within the firewall configuration. Filter-specific
policers allow you to configure policers and counters for a specific filter name.
When you configure the filter-specific statement, a single policer set is created for the
entire filter. All traffic matching the terms of the firewall filter with the action policer goes
through that single policer. The default is a term-specific policer in which a single policer
set is created for each term within the filter. All traffic matching the terms of the firewall
filter with the action policer goes through the part of the policer that is specific to that
term.
To configure filter-specific policers, include the filter-specific statement at the [edit
firewall policer policer-name] hierarchy level:
[edit firewall policer policer-name]
filter-specific;
If the filter-specific statement is not configured, then the policer defaults to a term-specific
policer.
You can apply the filter-specific policers to the family inet.
Configuring Policer Actions for Specific Address Prefixes
You can configure prefix-specific actions within the firewall configuration. Prefix-specific
actions allow you to configure policers and counters for specific addresses or ranges of
addresses. This allows you to essentially create policers and counters on a per-prefix
level.
Copyright © 2010, Juniper Networks, Inc.
297