Policer Configuration

To configure policers, you include statements at the [edit firewall] hierarchy level of the configuration:

[edit firewall]

policer policer-name {

    filter-specific;

    if-exceeding {

        bandwidth-limit bps;

        bandwidth-percent number;

        burst-size-limit bytes;

    }

    logical-bandwidth-policer;

    logical-interface-policer;

    then {

        policer-action;

    }

}

interface-set interface-set-name {

    [ interface-names ];

}

family family-name {

    filter filter-name {

        accounting-profile name;

        interface-specific;

    }

    prefix-action name {

        count;

        destination-prefix-length prefix-length;

        policer policer-name;

        source-prefix-length prefix-length;

        subnet-prefix-length prefix-length;

    }

}

load-balance-group group-name {

    next-hop-group [ group-names ];

}

three-color-policer name {

    action {

        loss-priority high then discard;

    }

    logical-interface-policer;

    single-rate {

        (color-aware | color-blind);

        committed-information-rate bps;

        committed-burst-size bytes;

        excess-burst-size bytes;

    }

    two-rate {

        (color-aware | color-blind);

        committed-information-rate bps;

        committed-burst-size bytes;

        peak-information-rate bps;

        peak-burst-size bytes;

    }

}

The following sections describe the tasks required for configuring policers and provide configuration examples:

• Minimum Policer Configuration
• Configuring Policers
• Configuring an Interface Set
• Applying an Interface Policer
• Configuring an Aggregate Policer
• Configuring a Bandwidth Policer
• Configuring a Load-Balance Group
• Configuring a Tricolor Marking Policer
• Examples: Configuring Policing