[j-nsp] EX3200/EX4200 Rate-Limit
Daniel Goscomb
dang at goscomb.net
Mon Nov 16 13:25:35 EST 2009
Hi
Yes, its the only policer on the switch and is only applied to this port in our case.
> -----Original Message-----
> From: Felix Schueren [mailto:felix.schueren at hosteurope.de]
> Sent: 16 November 2009 18:23
> To: Daniel Goscomb
> Cc: Brendan Mannella; juniper-nsp
> Subject: Re: [j-nsp] EX3200/EX4200 Rate-Limit
>
> Dan,
>
> >
> > firewall {
> > policer 500m {
> > if-exceeding {
> > bandwidth-limit 600m;
> > burst-size-limit 15m;
> > }
> > then discard;
> > }
> > family inet {
> > filter 500m-limit {
> > term default {
> > then policer 500m;
> > }
> > }
> > }
> > }
> >
> >
> > dang at cs0.sov.uk# show interfaces ge-0/0/4
> > description SERVER::mirror0.sov.uk;
> > unit 0 {
> > family inet {
> > filter {
> > input 500m-limit;
> > }
> > address x.x.x.x/y;
> > }
> > }
> >
> >
>
> if you apply that firewall-filter to multiple interfaces (or simply
> reference the same policer from within different filters), they will
> all
> share the same bucket. I.e. if one of those interfaces exceeds the
> limit, all other interfaces using the same policer will drop packets,
> even if they're different customers or different filters. If you want a
> generic "500m" limit and reference that from different filters, on
> M-series you can simply use "filter-specific" within the policer and it
> will generate internal policers automatically for each reference within
> a different filter - the EXes won't.
>
> Kind regards.
>
> Felix
>
> --
> Felix Schüren
> Head of Network
>
> -----------------------------------------------------------------------
> Host Europe GmbH - http://www.hosteurope.de
> Welserstraße 14 - 51149 Köln - Germany
> Telefon: 0800 467 8387 - Fax: +49 180 5 66 3233 (*)
> HRB 28495 Amtsgericht Köln - USt-IdNr.: DE187370678
> Geschäftsführer:
> Uwe Braun - Alex Collins - Mark Joseph - Patrick Pulvermüller
>
> (*) 0,14 EUR/Min. aus dem dt. Festnetz, Mobilfunkpreise ggf. abweichend
More information about the juniper-nsp
mailing list