force-premium (Firewall Filter Action)
Syntax
force-premium;
Hierarchy Level
[edit firewall family family-name filter filter-name term term-name then], [edit logical-systems logical-system-name firewall family family-name filter filter-name term term-name then]
Description
Firewall
filter option to force premium treatment for traffic (MX Series routers)—
By default, a hierarchical policer processes the traffic it receives
according to the traffic’s forwarding class. Premium, expedited-forwarding
traffic has priority for bandwidth over aggregate, best-effort traffic.
Now you can include the force-premium
option at the [edit firewall filter filter-name term term-name]
hierarchy level to ensure that traffic
matching the term is treated as premium traffic by a subsequent hierarchical
policer, regardless of its forwarding class. This traffic is given
preference over any aggregate traffic received by that policer. Consider
a scenario where a firewall filter is applied to an interface that
receives both expedited-forwarding voice traffic and best-effort video
traffic. Traffic that matches the first term of the filter is passed
to a hierarchical policer in the second term. The hierarchical policer
also receives best-effort data traffic from another source. The filtered
video traffic is treated the same as this data traffic, as aggregate
traffic with a lower priority than the premium voice traffic. Consequently,
some of the video traffic might be dropped and some of the data traffic
passed on.
To avoid that situation, include the force-premium
option in the firewall filter term that passes traffic to the hierarchical
policer. This term forces the video traffic to be marked as premium
traffic. The hierarchical policer gives both the voice traffic and
the video traffic priority over the aggregate data traffic.
The force-premium
filter option is supported
only on MPCs.
Required Privilege Level
firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3 for family inet
and inet6
.
Support for family vpls
, ccc
, and bridge
added in Junos OS Releases 13.3R8, 13.3R10, 14.1R8,
14.2R7, 15.1R4,16.1R1, and 17.1R1.