Configuring Traffic Policing in Layer 3 VPNs

You can use policing to control the amount of traffic flowing over the interfaces servicing a Layer 3 VPN. If policing is disabled on an interface, all the available bandwidth on a Layer 3 VPN tunnel can be used by a single CCC or TCC interface.

For more information about the policer statement, see the Junos Policy Framework Configuration Guide.

To enable Layer 3 VPN policing on an interface, include the policer statement:

policer {input policer-template-name;output policer-template-name;}

If you configure CCC encapsulation, you can include the policer statement at the following hierarchy levels:

[edit interfaces interface-name unit logical-unit-number family ccc]
[edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family ccc]

If you configure TCC encapsulation, you can include the policer statement at the following hierarchy levels:

[edit interfaces interface-name unit logical-unit-number family tcc]
[edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family tcc]