Minimum Policer Configuration

To configure a policer, you must perform at least the following tasks:

• Configure policers—To configure policers, include the policer statement at the [edit firewall] hierarchy level. After policers are defined, you reference them in the then clause of a term:

  [edit firewall]

  policer policer-name {

  if-exceeding {

  bandwidth-limit bps;

  bandwidth-percent number;

  burst-size-limit bytes;

  }

  then {

  policer-action;

  }

  }

  family family-name {

  filter filter-name {

  }

  }

• Add actions, such as accept, discard, or next term, or action modifiers, such as count or log.
• Apply the policers to an interface to activate them.

The policer is applied to the packet first, and if the packet exceeds the defined limits, the actions of the then clause of the policer are applied. If the result of the policing action is not a discard, the remaining components of the then clause of the term are applied.

Note: If an input filter is configured on the same logical interface as the policer, the policer is executed first.

To display statistics about a filter statement policer configuration, use the show policers command.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.