[an error occurred while processing this directive][an error occurred while processing this directive]

policer

Syntax

policer policer-name {filter-specific;if-exceeding {bandwidth-limit bps;bandwidth-percent number;burst-size-limit bytes;}logical-interface-policer;physical-interface-policer;then {policer-action;}}

Hierarchy Level

[edit firewall],[edit logical-systems logical-system-name firewall]

Release Information

Statement introduced before JUNOS Release 7.4.

Logical systems support introduced in JUNOS Release 9.3.

physical-interface-policer statement introduced in JUNOS Release 9.6.

Description

Configure policer rate limits and actions. When included at the [edit firewall] hierarchy level, the policer statement creates a template, and you do not have to configure a policer individually for every firewall filter or interface. To activate a policer, you must include the policer-action modifier in the then statement in a firewall filter term or on an interface.

Options

policer-action—One or more actions to take:

  • discard—Discard traffic that exceeds the rate limits.
  • forwarding-class class-name—Specify the particular forwarding class.
  • loss-priority—Set the packet loss priority (PLP) to low, medium-low, medium-high, or high.

policer-name—Name that identifies the policer. The name can contain letters, numbers, and hyphens (-), and can be up to 255 characters long. To include spaces in the name, enclose it in quotation marks (“ ”).

then—Actions to take on matching packets.

The remaining statements are explained separately.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.


Published: 2010-05-11

[an error occurred while processing this directive]