To configure policers, you include statements at the [edit firewall] hierarchy level of the configuration:
- [edit firewall]
-
policer policer-name {
-
filter-specific;
-
-
if-exceeding {
- bandwidth-limit bps;
- bandwidth-percent number;
- burst-size-limit bytes;
- }
-
logical-bandwidth-policer;
-
logical-interface-policer;
-
- then {
-
policer-action;
- }
- }
-
interface-set interface-set-name {
- [ interface-names ];
- }
-
family family-name {
-
-
filter filter-name {
-
accounting-profile name;
-
interface-specific;
- }
-
-
prefix-action name {
- count;
- destination-prefix-length prefix-length;
- policer policer-name;
- source-prefix-length prefix-length;
- subnet-prefix-length prefix-length;
- }
- }
-
load-balance-group group-name {
- next-hop-group [ group-names ];
- }
-
three-color-policer (Configuring) name {
-
- action {
- loss-priority high then discard;
- }
-
logical-interface-policer;
-
- single-rate {
- (color-aware | color-blind);
- committed-information-rate bps;
- committed-burst-size bytes;
- excess-burst-size bytes;
- }
-
- two-rate {
- (color-aware | color-blind);
- committed-information-rate bps;
- committed-burst-size bytes;
- peak-information-rate bps;
- peak-burst-size bytes;
- }
- }
The following sections describe the tasks required for configuring policers and provide configuration examples: