Example: Configuring Policing on an ATM IMA Pseudowire
This example shows the configuration of policing on an ATM IMA pseudowire. On ACX Series routers, the ATM policer is an input policer that is applied to the ATM IMA logical interface. The ATM IMA logical interface must have the circuit cross-connect (CCC) encapsulation family configured for the configuration to work.
Requirements
This example uses the following hardware and software components:
- ACX Series router
- Junos OS Release 12.2 or later
- A previously configured ATM IMA pseudowire. For steps to configure an ATM IMA pseudowire, see Configuring Inverse Multiplexing for ATM (IMA).
Overview
In this example, the ATM IMA pseudowire logical interfaces (unit 0, unit 1 and unit 2) are configured with three input ATM policers—policer-1, policer-2, and policer-3. The ATM policers are configured with the following parameters:
- logical-interface-policer—The logical interface policer is configured explicitly on each logical interface (unit).
- atm-service—The ATM service category used to define the bit rate at which traffic is policed.
- peak-rate—The peak rate is the top rate at which traffic can burst. This is a mandatory statement that must be included for the configuration to work correctly.
- sustained-rate—The sustained rate is the normal traffic rate averaged over time.
- maximum-burst-size—The maximum burst size is the maximum number of cells that a burst of traffic can contain.
- cdvt—The Cell Delay Variation Tolerance is a mandatory statement that must be included for the configuration to work correctly.
- policing-action—The specified policing action used when the traffic exceeds the limits set for the policer.
Configuration
The following steps require you to navigate various levels in the configuration hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration Mode in the CLI User Guide.
To configure policing on an ATM IMA pseudowire, perform these tasks:
CLI Quick Configuration
To quickly configure this example, copy the following commands, paste them in a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level:
Configuring an ATM Policer
Step-by-Step Procedure
To configure the ATM policer, which is applied to the logical ATM IMA pseudowire:
- Define the policer:[edit]user@host# edit firewall atm-policer policer-1
- Specify the parameters for policer-1:[edit firewall atm-policer policer-1]user@host# set logical-interface-policeruser@host# set atm-service rtvbruser@host# set peak-rate 2kuser@host# set sustained-rate 1800user@host# set max-burst-size 400user@host# set cdvt 900001user@host# set policing-action discard-tag
- Specify the parameters for policer-2:[edit firewall atm-policer policer-2]user@host# set logical-interface-policeruser@host# set atm-service nrtvbruser@host# set peak-rate 1800user@host# set sustained-rate 1500user@host# set max-burst-size 300user@host# set cdvt 999991user@host# set policing-action discard
- Specify the parameters for policer-3:[edit firewall atm-policer policer-3]user@host# set logical-interface-policeruser@host# set atm-service cbruser@host# set peak-rate 2kuser@host# set cdvt 999991user@host# set policing-action count
After you have configured the ATM policers, enter the commit command from configuration mode.
Applying the ATM Policer on the ATM IMA Logical Interface
Step-by-Step Procedure
To create the ATM IMA logical interface on which to apply the ATM policers:
- Define the ATM interface:[edit interfaces]user@host# edit interfaces at-0/0/16
- Specify the ATM interface unit and apply the first input
policer:[edit interfaces at-0/0/16]user@host# set unit 0 atm-policer input-atm-policer policer-1
- Specify the encapsulation family type for unit 0:[edit interfaces at-0/0/16]user@host# set unit 0 family ccc
- Specify the ATM interface unit and apply the second input
policer:[edit interfaces at-0/0/16]user@host# set unit 1 atm-policer input-atm-policer policer-2
- Specify the encapsulation family type for unit 1:[edit interfaces at-0/0/16]user@host# set unit 1 family ccc
- Specify the ATM interface unit and apply the third input
policer:[edit interfaces at-0/0/16]user@host# set unit 2 atm-policer input-atm-policer policer-3
- Specify the encapsulation family type for unit 2:[edit interfaces at-0/0/16]user@host# set unit 2 family ccc
Results
From configuration mode, confirm your configuration by entering the show command. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.
[edit firewall]
user@host# show
atm-policer policer-1 {
logical-interface-policer;
atm-service rtvbr;
peak-rate 2k;
sustained-rate 1800;
max-burst-size 400;
cdvt 900001;
policing-action discard-tag;
}
atm-policer policer-2 {
logical-interface-policer;
atm-service nrtvbr;
peak-rate 1800;
sustained-rate 1500;
max-burst-size 300;
cdvt 999991;
policing-action discard;
}
atm-policer policer-3 {
logical-interface-policer;
atm-service cbr;
peak-rate 2k;
cdvt 800001;
policing-action count;
}[edit interfaces]
user@host# show
at-0/0/16 {
unit 0 {
atm-policer {
input-atm-policer policer-1;
}
family ccc;
}
unit 1 {
atm-policer {
input-atm-policer policer-2;
}
family ccc;
}
unit 2 {
atm-policer {
input-atm-policer policer-3;
}
family ccc;
}
}After you have completed the configuration, enter the commit command from configuration mode.

