Logical Interface (Aggregate) Policer Overview

A logical interface policer—also called an aggregate policer—is a two-color or three-color policer that defines traffic rate limiting. Starting in Junos OS Release 15.1X49-D40 and Junos OS Release 17.3R1, you can apply a policer to input or output traffic for multiple protocol families on the same logical interface without needing to create multiple instances of the policer.

To configure a single-rate two-color logical interface policer, include the logical-interface-policer statement at the [edit firewall policer policer-name] hierarchy level.

You apply a logical interface policer to Layer 3 traffic directly to the interface configuration at the protocol family level (to rate-limit traffic of a specific protocol family). You cannot reference a logical interface policer from a stateless firewall filter term and then apply the filter to a logical interface.

You can apply a logical interface policer to unicast traffic only. .

To display a logical interface policer on a particular interface, issue the show interfaces policers operational mode command.