Re: JunOS rate-limiting

From: dylan greene (db70@loa.com)
Date: Mon Aug 13 2001 - 11:11:28 EDT


On Wed, 8 Aug 2001, Christian Malo wrote:

> is it possible to rate-limit per subnet on JunOS

Sure is..

It'll look something like this:

interfaces {
    fe-0/0/0 {
        unit 0 {
            family inet {
                filter {
                    output outbound-filter;
                }
                address x.x.x.x/xx;
            }
        }
    }
}

policy-options {
    prefix-list customer-a-list-1 {
        10.0.0.0/8;
    }

firewall {
   filter outbound-filter {
        policer maxrate-200k-outbound {
            if-exceeding {
                bandwidth-limit 200k;
                burst-size-limit <bsize>;
            }
            then discard;
        }
        term customer-a-list-1 {
            from {
                destination-prefix-list {
                    customer-a-list-1;
                }
            }
            then policer maxrate-200k-outbound;
        }
    }
}

Just add addtl. subnets to that prefix list..

..Dylan



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:36 EDT