physical-interface-policer
Syntax
physical-interface-policer;
Hierarchy Level
[edit dynamic-profiles profile-name firewall policer policer-name], [edit firewall policer policer-name], [edit firewall three-color-policer policer-name], [edit logical-system logical-system-name firewall policer policer-name], [edit logical-system logical-system-name three-color-policer policer-name], [edit routing-instances routing-instance-name firewall policer policer-name], [edit routing-instances routing-instance-name firewall three-color-policer policer-name], [edit logical-systems logical-system-name routing-instances routing-instance-name firewall policer policer-name], [edit logical-systems logical-system-name routing-instances routing-instance-name firewall three-color-policer policer-name]
Description
Configure an aggregate policer for a physical interface.
A physical interface policer can be a two-color or three-color policer. When you apply physical interface policer, to different protocol families on the same logical interface, the protocol families share the same policer instance. This means that rate limiting is performed in aggregate for the protocol families for which the policer is applied. This feature enables you to use a single policer instance to perform aggregate policing for different protocol families on the same physical interface. If you want a policer instance to be associated with a protocol family, the corresponding physical interface filter needs to be applied to that protocol family. The policer is not automatically applied to all protocol families configured on the physical interface.
In contrast, with logical interface policers there are multiple separate policer instances.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.