[j-nsp] Prefix-Specific Action

Josef Buchsteiner josefb at juniper.net
Wed Jan 15 16:56:55 EST 2003


At 12:56 PM 1/15/2003, Jonathan Tse wrote:
>Thanks Josef,
>
>Your explanation is crystal clear! May be the manual should follow your
>instead :)
>
>Is there any hardware requirement like FPC-II to enable such feature and how
>many subnet that a M20 can handle?

If you use a /16 subnet and you want to police on a /32 
destination-prefix-length
you basically use 65536 policers which is the current maximum you can configure
for one subnet. You will get a warning message in the cli when you try to go
beyond this number.


thanks
Josef


>Million thanks!
>Jonathan.
>
>----- Original Message -----
>From: "Josef Buchsteiner" <josefb at juniper.net>
>To: "Jonathan Tse" <jonathantse at pacific.net.sg>;
><juniper-nsp at puck.nether.net>
>Sent: Wednesday, January 15, 2003 7:38 PM
>Subject: Re: [j-nsp] Prefix-Specific Action
>
>
> > At 12:43 AM 1/15/2003, Jonathan Tse wrote:
> > >Hi Josef,
> > >
> > >that is cool! lots of people would love it! one more question: if two
> > >interfaces shares the same filter with prefix-specific action being used
> > >(let's say 1Mbps per /32 in a /24), does the policy shape the traffic per
> > >interface (meaning max 1Mbps each interface for that /32) or regardless
>of
> > >the number of interfaces (meaning total 1Mbps thru the above two
>interfaces
> > >for that /32)?
> >
> >
> > Jonathan,
> >          the prefix-specific is done per address not per interface.
> > i.e. you want to police all http traffic to certain host in /24 subnet
>where
> > all the host are in a /30 range you do this for all your host regardless
> > of the interface. You still can add an interface-policer which police
> > at the aggregate level for a specific interface. Given the example above
> > you could also
> > say that all the http traffic to each hosts should be 500kbps but the
>total
> > of all http traffic should never go higher then 1Mbps which can be
>accomplished
> > with the next term statement ( aka multilevel policer ... )
> >
> >
> > thanks
> > Josef
> >
> >
> >
> >
> >
> >
> > >thanks!
> > >Jonathan.
> > >
> > >----- Original Message -----
> > >From: "Josef Buchsteiner" <josefb at juniper.net>
> > >To: "Jonathan Tse" <jonathantse at pacific.net.sg>;
> > ><juniper-nsp at puck.nether.net>
> > >Sent: Wednesday, January 15, 2003 4:25 AM
> > >Subject: Re: [j-nsp] Prefix-Specific Action
> > >
> > >
> > > > At 05:31 AM 1/14/2003, Jonathan Tse wrote:
> > > > >Hi,
> > > > >
> > > > >Any idea what is this Prefix-Specific Action for?
> > > > >
> > > >
> > >
> >http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-policy/ht
> > >m
> > > > >l/policer-config9.html#1046287
> > > > >
> > > >
> > >
> >http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-policy/ht
> > >m
> > > > >l/policer-config10.html#1046825
> > > > >
> > > > >In layman's term, is it for policing individual address (like 1Mbps
>per
> > >/32)
> > > > >within a given prefixes (/24)?
> > > >
> > > > this is exactly what the motivation is as you stated
> > > > to police on a more granular level
> > > >
> > > > regards
> > > > Josef
> > > >
> > > >
> > > > >Thanks,
> > > > >Jonathan Tse
> > > > >Senior Network Engineer, Pacific Internet - Singapore
> > > > >NOC: +65 6872-1010 DID: +65 6771-0843 FAX: +65 6872-6674
> > > > >
> > > > >_______________________________________________
> > > > >juniper-nsp mailing list juniper-nsp at puck.nether.net
> > > > >http://puck.nether.net/mailman/listinfo/juniper-nsp
> > > >
> > >
> > >_______________________________________________
> > >juniper-nsp mailing list juniper-nsp at puck.nether.net
> > >http://puck.nether.net/mailman/listinfo/juniper-nsp
> >
>
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>http://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list