[j-nsp] Time-of-day based traffic conditioning

[Ben Dale]

Okay, it's ugly, but:

Write a policy on the SRX that is attached to a scheduler.  

Make the "then" action of the policy permit application-services idp.

Write an IDP policy that has a "then" action to re-write DSCP markings for this traffic.

Write a CoS policy on your EXs to police traffic matching that DSCP value - I've never been able to re-write AND police on those values in the SRX on one flow.

Just remember - schedulers only enable and disable policies, so make sure you permit the traffic in a fall-through policy.  Ideally you'd put the "business-hours" policy at the top and attach it to the IDP rule/scheduler, then have a policy below it for the out-of-hours.

Cheers,

Ben

On 10/01/2012, at 12:28 PM, Dale Shaw wrote:

> Hi all,
> 
> Does anyone know of a way to enforce traffic policing or shaping based on
> time of day?
> 
> Platforms available to us: EX-series (EX4200 predominantly), J-series
> (J2320/J6350) and SRX-series (SRX240, SRX650, SRX3K, SRX5K).
> 
> I'm looking for a way -- preferably a built-in way (avoiding scripts if
> possible) -- to limit a particular application's throughput during business
> hours.
> 
> The application is NetApp SnapMirror. I suspect a far better option would
> be to control transmission rates at the source but I'd like to investigate
> JUNOS-based controls as well.
> 
> cheers,
> Dale
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>