Configure Layer 2 VPN Policing on Interfaces

You can use policing to control the amount of traffic flowing over the interfaces servicing a Layer 2 VPN. If policing is disabled on an interface, all the available bandwidth on a Layer 2 VPN tunnel can be used by a single CCC or TCC interface.

For more information about the policer statement, see the JUNOS Policy Framework Configuration Guide.

To enable Layer 2 VPN policing on an interface, include the policer statement:

policer {

    input policer-template-name;

    output policer-template-name;

}

If you configure CCC encapsulation, you can include the policer statement at the following hierarchy levels:

• [edit interfaces interface-name unit logical-unit-number family ccc]
• [edit logical-routers logical-router-name interfaces interface-name unit logical-unit-number family ccc]

If you configure TCC encapsulation, you can include the policer statement at the following hierarchy levels:

• [edit interfaces interface-name unit logical-unit-number family tcc]
• [edit logical-routers logical-router-name interfaces interface-name unit logical-unit-number family tcc]

For information about how to configure the encapsulation type, see Configure the Encapsulation Type.