[j-nsp] filter actions: policer and count - order of operations,

Piotr piotr.1234 at interia.pl
Wed Mar 4 06:31:54 EST 2015


Hi,

What is order of operations in Junos (MX) policer vs count in two cases: 
when packets will be droped by policer ( terminating actions)  or passed 
by policer (nonterminating). Every packets will be counted in both cases ?


example:

term syn_xxx {
     from {
         tcp-initial;
     }
     then {
         policer policer_syn_xxx;
         count syn_xxx;
         accept;
     }
}

# show firewall policer policer_syn_xxx
if-exceeding {
     bandwidth-limit 40k;
     burst-size-limit 4k;
}
then discard;



Thanks for explanation.


More information about the juniper-nsp mailing list