Is It possible to do such policer using vlans instead of interfaces ?

I think that class-of-service does not support shaping rate for vlans or RVI.

Even with junos 11.1

http://www.juniper.net/techpubs/en_US/junos11.1/topics/reference/requirements/firewall-filter-ex-series-match-conditions.html





You may want to consider the "shaping-rate" statement. Look at the
example below for 20 Mbps throttling.
--------------------
ge-0/0/0 {
unit 0 {
family ethernet-switching {
filter {
input filter-20m;
}
}
}
}

class-of-service {
interfaces {
ge-0/0/0 {
shaping-rate 20m;
}
}

firewall {
family ethernet-switching {
filter filter-20m {
interface-specific;
term 1 {
then policer policer-20m;
}
}
}
policer policer-20m {
filter-specific;
if-exceeding {
bandwidth-limit 20m;
burst-size-limit 1m;
}
then discard;
}
}

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to