Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Example: Configuring Policing on an ATM IMA Pseudowire

    This example shows the configuration of policing on an ATM IMA pseudowire. On ACX Series routers, the ATM policer is an input policer that is applied to the ATM IMA logical interface. The ATM IMA logical interface must have the circuit cross-connect (CCC) encapsulation family configured for the configuration to work.

    Requirements

    This example uses the following hardware and software components:

    Overview

    In this example, the ATM IMA pseudowire logical interfaces (unit 0, unit 1 and unit 2) are configured with three input ATM policers—policer-1, policer-2, and policer-3. The ATM policers are configured with the following parameters:

    • logical-interface-policer—The logical interface policer is configured explicitly on each logical interface (unit).
    • atm-service—The ATM service category used to define the bit rate at which traffic is policed.
    • peak-rate—The peak rate is the top rate at which traffic can burst. This is a mandatory statement that must be included for the configuration to work correctly.
    • sustained-rate—The sustained rate is the normal traffic rate averaged over time.
    • maximum-burst-size—The maximum burst size is the maximum number of cells that a burst of traffic can contain.
    • cdvt—The Cell Delay Variation Tolerance is a mandatory statement that must be included for the configuration to work correctly.
    • policing-action—The specified policing action used when the traffic exceeds the limits set for the policer.

    Configuration

    The following steps require you to navigate various levels in the configuration hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration Mode in the CLI User Guide.

    To configure policing on an ATM IMA pseudowire, perform these tasks:

    CLI Quick Configuration

    To quickly configure this example, copy the following commands, paste them in a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level:

    set firewall atm-policer policer-1 logical-interface-policerset firewall atm-policer policer-1 atm-service rtvbrset firewall atm-policer policer-1 peak-rate 2kset firewall atm-policer policer-1 sustained-rate 1800set firewall atm-policer policer-1 max-burst-size 400set firewall atm-policer policer-1 cdvt 900001set firewall atm-policer policer-1 policing-action discard-tagset firewall atm-policer policer-2 logical-interface-policerset firewall atm-policer policer-2 atm-service nrtvbrset firewall atm-policer policer-2 peak-rate 1800set firewall atm-policer policer-2 sustained-rate 1500set firewall atm-policer policer-2 max-burst-size 300set firewall atm-policer policer-2 cdvt 999991set firewall atm-policer policer-2 policing-action discardset firewall atm-policer policer-3 logical-interface-policerset firewall atm-policer policer-3 atm-service cbrset firewall atm-policer policer-3 peak-rate 2kset firewall atm-policer policer-3 cdvt 800001set firewall atm-policer policer-3 policing-action countset interfaces at-0/0/16 unit 0 atm-policer input-atm-policer policer-1set interfaces at-0/0/16 unit 0 family cccset interfaces at-0/0/16 unit 1 atm-policer input-atm-policer policer-2set interfaces at-0/0/16 unit 1 family cccset interfaces at-0/0/16 unit 2 atm-policer input-atm-policer policer-3set interfaces at-0/0/16 unit 2 family ccc

    Configuring an ATM Policer

    Step-by-Step Procedure

    To configure the ATM policer, which is applied to the logical ATM IMA pseudowire:

    1. Define the policer:
      [edit]user@host# edit firewall atm-policer policer-1
    2. Specify the parameters for policer-1:
      [edit firewall atm-policer policer-1]user@host# set logical-interface-policeruser@host# set atm-service rtvbruser@host# set peak-rate 2kuser@host# set sustained-rate 1800user@host# set max-burst-size 400user@host# set cdvt 900001user@host# set policing-action discard-tag
    3. Specify the parameters for policer-2:
      [edit firewall atm-policer policer-2]user@host# set logical-interface-policeruser@host# set atm-service nrtvbruser@host# set peak-rate 1800user@host# set sustained-rate 1500user@host# set max-burst-size 300user@host# set cdvt 999991user@host# set policing-action discard
    4. Specify the parameters for policer-3:
      [edit firewall atm-policer policer-3]user@host# set logical-interface-policeruser@host# set atm-service cbruser@host# set peak-rate 2kuser@host# set cdvt 999991user@host# set policing-action count

      After you have configured the ATM policers, enter the commit command from configuration mode.

    Applying the ATM Policer on the ATM IMA Logical Interface

    Step-by-Step Procedure

    To create the ATM IMA logical interface on which to apply the ATM policers:

    1. Define the ATM interface:
      [edit interfaces]user@host# edit interfaces at-0/0/16
    2. Specify the ATM interface unit and apply the first input policer:
      [edit interfaces at-0/0/16]user@host# set unit 0 atm-policer input-atm-policer policer-1
    3. Specify the encapsulation family type for unit 0:
      [edit interfaces at-0/0/16]user@host# set unit 0 family ccc
    4. Specify the ATM interface unit and apply the second input policer:
      [edit interfaces at-0/0/16]user@host# set unit 1 atm-policer input-atm-policer policer-2
    5. Specify the encapsulation family type for unit 1:
      [edit interfaces at-0/0/16]user@host# set unit 1 family ccc
    6. Specify the ATM interface unit and apply the third input policer:
      [edit interfaces at-0/0/16]user@host# set unit 2 atm-policer input-atm-policer policer-3
    7. Specify the encapsulation family type for unit 2:
      [edit interfaces at-0/0/16]user@host# set unit 2 family ccc

    Results

    From configuration mode, confirm your configuration by entering the show command. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

    [edit firewall]
    user@host# show
    atm-policer policer-1 {
        logical-interface-policer;
        atm-service rtvbr;
        peak-rate 2k;
        sustained-rate 1800;
        max-burst-size 400;
        cdvt 900001;
        policing-action discard-tag;
    }
    atm-policer policer-2 {
        logical-interface-policer;
        atm-service nrtvbr;
        peak-rate 1800;
        sustained-rate 1500;
        max-burst-size 300;
        cdvt 999991;
        policing-action discard;
    }
    atm-policer policer-3 {
        logical-interface-policer;
        atm-service cbr;
        peak-rate 2k;
        cdvt 800001;
        policing-action count;
    }
    [edit interfaces]
    user@host# show
    at-0/0/16 {
        unit 0 {
            atm-policer {
                input-atm-policer policer-1;
            }
            family ccc;
        }
        unit 1 {
            atm-policer {
                input-atm-policer policer-2;
            }
            family ccc;
        }
        unit 2 {
            atm-policer {
                input-atm-policer policer-3;
            }
            family ccc;
        }
    }

    After you have completed the configuration, enter the commit command from configuration mode.

    Published: 2013-02-19