Minimum Policer Configuration
To configure a policer, you must perform at least the following tasks:
- Configure policers—To configure policers, include
the policer statement at the [edit firewall] hierarchy
level. After policers are defined, you reference them in the then clause of a term:[edit firewall]policer policer-name {if-exceeding {bandwidth-limit bps;bandwidth-percent number;burst-size-limit bytes;}then {policer-action;}}family family-name {filter filter-name {}}
- Add actions. Only the following actions are supported
by policers:
- discard—Discard a packet that exceeds the rate limits
- loss-priority level—Set the loss priority level to low, medium-low, medium-high, or high.
- forwarding-class class-name—Specify the forwarding class for any class-name already configured.
- Apply the policers to an interface to activate them.
If the packet exceeds the defined limits, the actions of the then clause of the policer are applied. If the result of the policing action is not a discard, the remaining components of the then clause of the term are applied.
 | Note: If an input filter is configured on the same logical interface as the policer, the policer is executed first. |
To display statistics about a filter statement policer configuration, use the show policers command.
