policer
Syntax
- policer policer-name {
- filter-specific;
-
- if-exceeding {
- bandwidth-limit bps;
- bandwidth-percent number;
- burst-size-limit bytes;
- }
- logical-interface-policer;
- physical-interface-policer;
-
- then {
- policer-action;
- }
- }
Hierarchy Level
Release Information
Statement introduced before JUNOS Release 7.4.
Logical systems support introduced in JUNOS Release 9.3.
physical-interface-policer statement introduced in JUNOS Release 9.6.
Description
Configure policer rate limits and actions. When included at the [edit firewall] hierarchy level, it creates a template, and you do not have to configure a policer individually for every firewall filter or interface. To activate a policer, you must include the policer action modifier in the then statement in a firewall filter term or on an interface.
Options
-
policer-action—One or more actions to take:
- discard—Discard traffic that exceeds the rate limits.
- forwarding-class class-name—Specify the particular forwarding class.
- loss-priority—Set the packet loss priority (PLP) to low, medium-low, medium-high, or high.
-
policer-name—Name that identifies the policer. The name can contain letters, numbers, and hyphens (-), and can be up to 255 characters long. To include spaces in the name, enclose it in quotation marks (“ ”).
-
then—Actions to take on matching packets.
-
The remaining statements are explained separately.
Usage Guidelines
See Configuring Policers.
Required Privilege Level
firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.

