Guidelines for Configuring Hierarchical Policers on ACX Series Routers

You cannot specify the same policer as both a child policer and a parent policer.

The child policers of a hierarchical policer use the same resources as normal policers. Therefore, the maximum number of child policers and normal policers in the system for bridge domains and IPv4 services is as follows:

• Family Bridge

  A group of 124 entries of policers shared with other family-bridge filters.

  A maximum of approximately 62 policers when no other family-bridge filters with the count action for the firewall filter.

  Along with 62 policers, you can configure up to 62 family-bridge filters without the count action for the firewall filter.

• Family inet

  A group of 250 entries of policers shared with other family-inet filters.

  A maximum of about 125 policers when no other family-inet filters with the count action.

  Along with 125 policers, you can define up to 62 family-inet filters without the count action.

The hierarchical policer supports the same policer ranger and burst size behavior as normal policers.

You must configure the same hierarchical policer mode for all child policers that refer or link with the same parent policer instance.

You cannot use the same policer template as both a normal policer and a child policer.

You cannot use the same base policer settings as both a normal policer and an aggregate or hierarchical policer.

You cannot use the filter-specific statement at the [edit firewall policer policer-name] hierarchy level to instantiate an aggregate policer. Instead, the instantiation of the policer is performed by including the aggregate statement at the [edit firewall policer policer-name] hierarchy level.

All the child policers of a certain aggregate policer must contain the same definitions of settings or attributes.

All the policer instantiation formats are supported for the aggregate policer.

Ingress two-level hierarchical policing is supported on all ACX routers.

All the supported match conditions for filters used with normal policers are supported with micro-flow policers.

You can configure up to 32 hierarchical policer instances. You can configure up to 32 child policers per macro policer instance.

You can configure hierarchical policers on aggregated Ethernet interfaces.