[j-nsp] Rate limiting v4 and v6 together

Mark Tinka mtinka at globaltransit.net
Fri Jun 3 03:41:41 EDT 2011


On Friday, June 03, 2011 02:05:45 AM Chris Adams wrote:

> Everybody suggested putting the policer directly on the
> interface and setting "logical-interface-policer" in the
> policer.

Watch out if you're running Junos 9.3R2.8 (earlier code 
could also be affected, not certain).

Implementing the 'logical-interface-policer' and applying it 
to the interface via a policer will cause the PFE to crash, 
very badly. And it won't recover until the policer is 
removed. We had the issue on an M7i, so I'm guessing the 
M10i is affected too. Don't know about other platforms.

The issue is fixed in the next release and later.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20110603/fce928ce/attachment.pgp>


More information about the juniper-nsp mailing list