Configuring a Hierarchical Policer

The Enhanced IQ PIC can police traffic at Layer 2 in a hierarchical manner. Hierarchical policing maintains two rates: an aggregate rate and a high-priority rate. The traffic is marked differently depending on class of service, currently expedited forwarding and nonexpedited forwarding.

To configure a hierarchical policer, include the aggregate and premium statements at the [edit firewall hierarchical-policer hierarchical-policer-name] hierarchy level:

[edit firewall hierarchical-policer hierarchical-policer-name]aggregate {if-exceeding {bandwidth-limit bps;burst-size-limit bytes;}then {policer-action;}}premium {if-exceeding {bandwidth-limit bps;burst-size-limit bytes;}then {policer-action;}}

You can configure rate limiting on the hierarchical policer. For information about configuring rate limiting, see Configuring Rate Limiting. You can configure a policer action for the hierarchical policer. For information about configuring policy actions, see Configuring Policer Actions.

Use the aggregate statement to configure a rate limit and policy actions for all traffic levels (premium and normal). Use the premium statement to configure a rate limit and policy actions for premium traffic levels.

After configuring the hierarchical policer, you can apply the policer to the logical or physical interface on the Enhanced IQ PIC. To apply a hierarchical policer, include the policer policer-name option at the [edit interfaces interface-name unit 0 family family-name] hierarchy level:

policer policer-name;

For more information about applying hierarchical policers, see the JUNOS Class of Service Configuration Guide.