Understanding Policers on OVSDB-Managed Interfaces
When you use a Contrail controller to manage VXLANs on a QFX
switch (through the Open vSwitch Database—OVSDB—management
protocol), the VXLAN interfaces are automatically configured with
the flexible-vlan-tagging and encapsulation extended-vlan-bridge statements. Starting
with Junos OS Release 14.1X53-D30, you can create family ethernet-switching logical units (subinterfaces) on VXLAN interfaces. This enables you to apply firewall filters with the action three-color-policer to these subinterfaces, which means that
you can apply two-rate three-color markers (policers) to OVSDB-managed
interfaces. See Example: Applying a Policer to OVSDB-Managed Interfaces for information about how
to configure policers on VXLAN interfaces managed by a Contrail controller.
Firewall filters are the only supported configuration
items on family ethernet-switching subinterfaces of OVSDB-managed
interfaces. Two-rate three-color markers are the only supported policers.
Change History Table
Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.
family ethernet-switching logical units (subinterfaces) on VXLAN interfaces.