policer (Configuring)

 

Syntax

Hierarchy Level

Release Information

Statement introduced before Junos OS Release 7.4.

The out-of-profile policer action added in Junos OS Release 8.1.

The logical-bandwidth-policer statement added in Junos OS Release 8.2.

Logical systems support introduced in Junos OS Release 9.3.

The physical-interface-policer statement introduced in Junos OS Release 9.6.

The shared-bandwidth-policer statement added in Junos OS Release 11.2.

Support at the [edit dynamic-profiles ... firewall] hierarchy level introduced in Junos OS Release 11.4.

Statement introduced in Junos OS Release 12.3R2 for EX Series switches.

Description

Configure policer rate limits and actions. When included at the [edit firewall] hierarchy level, the policer statement creates a template, and you do not have to configure a policer individually for every firewall filter or interface. To activate a policer, you must include the policer-action modifier in the then statement in a firewall filter term or on an interface.

You can configure the policer in static firewall filters or dynamic firewall filters in a dynamic client profile or a dynamic service profile.

Options

policer-actionOne or more actions to take:
  • discard—Discard traffic that exceeds the rate limits.

  • forwarding-class class-name—Specify the particular forwarding class.

  • loss-priority—Set the packet loss priority (PLP) to low, medium-low, medium-high, or high.

policer-nameName that identifies the policer. The name can contain letters, numbers, and hyphens (-), and can be up to 255 characters long. To include spaces in the name, enclose it in quotation marks (“ ”). Policer names cannot begin with an underscore in the form __.*.
thenActions to take on matching packets.

The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.