On 5 May 2017 at 12:02, Alexander Arseniev <arsen...@btinternet.com> wrote: > to nitpick ^ 2, if You DON'T want Your conforming NTP traffic to be > re-policed by AGG policer, You have to mark it somehow, i.e. with a > forwarding-class.
I presume OP is selling 1GE service and protecting that 1GE service so that NTP DoS can only eat 200Mbps out of it. I.e. you want NTP to hit both policers, but NTP policer first. Now another question entirely is, is policer even the right solution here. Or should there be 1Gbps scheduler with 3 classes of low, normal, high, and put NTP on low, transport 1Gbps of it, if there is no demand in normal and high, but yield all of it to normal and high. -- ++ytti _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp