Config Router

You are here: Home / Juniper / Policer using firewall filter : Configuration Example

Policer using firewall filter : Configuration Example

by

Policer using firewall filter : Policer using firewall filter : Configuration Example
How to configure policer based on firewall?

Use the following configuration:
Firewall filter:

set firewall family inet filter specificroutes term 1 from source-address 192.168.2.0/32
set firewall family inet filter specificroutes term 1 from source-address 192.168.1.0/32
set firewall family inet filter specificroutes term 1 from source-address 192.168.3.0/32
set firewall family inet filter specificroutes term 1 then policer routesspecific
set firewall family inetfilter specificroutes term 1 then accept
set firewall family inet filter specificroutes term 2 then accept

Policer:

set firewall policer routesspecific filter-specific
set firewall policer routesspecific if-exceeding bandwidth-limit 1m
set firewall policer routesspecific if-exceeding burst-size-limit 15K
set firewall policer routesspecific then discard

Interface:

[edit interfaces]
Interface “X” (example: fe-2/2/3) 
                 Unit “X” (example: 601) {
                      encapsulation ethernet;
                      family “X” (example: ipv4) {
                         filter {
                            input “FilterX” (example: filter1); # Works for multicast destination MAC address
                            output “FilterX” (example: filter1); # Does not work for multicast destination MAC address