Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


bandwidth (DDoS)


Hierarchy Level

  • For MX Series routers, T4000 routers, and EX9200 switches:

  • For ACX Series routers, PTX Series routers and QFX Series switches:


Configure the DDoS bandwidth rate limit; that is, the maximum traffic rate (packets per second) allowed by the specified policer. When the value is exceeded, a violation is declared.


packets-per-second—Number of packets per second that are allowed by the aggregate or packet-type policer.

  • Range: 1 through 100,000 packets per second

  • Default: The default bandwidth value varies by packet type or protocol. You can view the default values for all packet types or protocols before you begin control plane DDoS protection configuration by entering the show ddos-protection protocols parameters brief command from operational mode. For ACX Series routers, PTX Series routers and QFX Series switches, the default bandwidth limits are also provided in protocols (DDoS) (ACX Series, PTX Series, and QFX Series).

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 11.2.