Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Understanding Policers on OVSDB-Managed Interfaces

When you use a Contrail controller to manage VXLANs on a QFX switch (through the Open vSwitch Database—OVSDB—management protocol), the VXLAN interfaces are automatically configured with the flexible-vlan-tagging and encapsulation extended-vlan-bridge statements. Starting with Junos OS Release 14.1X53-D30, you can create family ethernet-switching logical units (subinterfaces) on VXLAN interfaces. This enables you to apply firewall filters with the action three-color-policer to these subinterfaces, which means that you can apply two-rate three-color markers (policers) to OVSDB-managed interfaces. See Example: Applying a Policer to OVSDB-Managed Interfaces for information about how to configure policers on VXLAN interfaces managed by a Contrail controller.

Note:

Firewall filters are the only supported configuration items on family ethernet-switching subinterfaces of OVSDB-managed interfaces. Two-rate three-color markers are the only supported policers.

Release History Table
Release
Description
14.1X53-D30
Starting with Junos OS Release 14.1X53-D30, you can create family ethernet-switching logical units (subinterfaces) on VXLAN interfaces.