Or use the "interface-specific" command in the firewall filter.
In this case you can use the same filter in multiple interfaces without
having shared bandwidth.
/riku
--
Riku Valpas
r...@valpas.com
+966 56 2526691 (KSA)
+358 40 7296561 (FIN)
> The way you have done it, the bandwidth will be shared
>
>
> Adding filter-specific knob to the policer will make them unique ... i.e.
>
> policer P {
> filter-specific;<----
> if-exceeding {
> bandwidth-limit 1000k;
> burst-size-limit 15k;
> }
> then discard;
> }
>
>
>
> On 4/15/09 1:33 PM, Bit Gossip wrote:
>> platform MX480 junos 9.3
>>
>> in the following config the same policer is appllied to 2 different
>> interfaces via 2 different firewall filters.
>>
>> Will the policer police at 1 mbps the aggregate traffic of the 2
>> interfaces; or it will police independent at 1 mbps the 2 differrent
>> interfaces?
>>
>> ge-5/2/1 {
>> unit 0 {
>> filter {
>> output F1;
>> }
>> }
>> }
>> ge-5/2/2 {
>> unit 0 {
>> filter {
>> output F2;
>> }
>> }
>> }
>>
>> policer P {
>> if-exceeding {
>> bandwidth-limit 1000k;
>> burst-size-limit 15k;
>> }
>> then discard;
>> }
>>
>> filter F1 {
>> term NATIONAL {
>> from {
>> source-class C1;
>> }
>> then {
>> policer P;
>> count C1;
>> accept;
>> }
>> }
>> term REMAINING {
>> then {
>> count REMAINING;
>> accept;
>> }
>> }
>> }
>> filter F2 {
>> term NATIONAL {
>> from {
>> source-class C2;
>> }
>> then {
>> policer P;
>> count C2;
>> accept;
>> }
>> }
>> term REMAINING {
>> then {
>> count REMAINING;
>> accept;
>> }
>> }
>> }
>>
>>
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
