Configure Layer 2 VPN Policing on Interfaces

You can use policing to control the amount of traffic flowing over the interfaces servicing a Layer 2 VPN. If policing is disabled on an interface, all the available bandwidth on a Layer 2 VPN tunnel can be used by a single CCC or TCC interface.

For more information about the policer statement, see the JUNOS Internet Software Configuration Guide: Policy Framework.

If you configure CCC encapsulation, include the policer statement to enable Layer 2 VPN policing on an interface:

interfaces interface-name {

    encapsulation encapsulation-type;

    unit 0 {

        family ccc {

            policer {

                input policer-template-name;

                output policer-template-name;

            }

        }

    }

}

You can configure this statement at the following hierarchy levels:

• [edit interfaces interface-name unit logical-unit-number family ccc]
• [edit logical-routers logical-router-name interfaces interface-name unit logical-unit-number family ccc]

If you configure TCC encapsulation, include the policer statement to enable Layer 2 VPN policing on an interface:

interfaces interface-name {

    encapsulation encapsulation-type;

    unit 0 {

        family tcc {

            policer {

                input policer-template-name;

                output policer-template-name;

            }

        }

    }

}

You can configure this statement at the following hierarchy levels:

• [edit interfaces interface-name unit logical-unit-number family tcc]
• [edit logical-routers logical-router-name interfaces interface-name unit logical-unit-number family tcc]

For information about how to configure the encapsulation type, see Configure the Encapsulation Type.