Minimum Policer Configuration

To configure a policer, you must perform at least the following tasks:

• Configure policers—To configure policers, include the policer statement at the [edit firewall] hierarchy level. After policers are defined, you reference them in the then clause of a term:
  [edit firewall]policer policer-name {if-exceeding {bandwidth-limit bps;bandwidth-percent number;burst-size-limit bytes;}then {policer-action;}}family family-name {filter filter-name {}}
• Add actions. Only the following actions are supported by policers:
  • discard—Discard a packet that exceeds the rate limits
  • loss-priority level—Set the loss priority level to low, medium-low, medium-high, or high.
  • forwarding-class class-name—Specify the forwarding class for any class-name already configured.
• Apply the policers to an interface to activate them.

If the packet exceeds the defined limits, the actions of the then clause of the policer are applied. If the result of the policing action is not a discard, the remaining components of the then clause of the term are applied.

Note: If an input filter is configured on the same logical interface as the policer, the policer is executed first.

To display statistics about a filter statement policer configuration, use the show policers command.