Re: [j-nsp] Aggregate policer config

2015-04-14 Thread Adam Vitkovsky
adam > -Original Message- > From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf > Of Matthew Crocker > Sent: 07 April 2015 22:16 > To: jnsp list > Subject: [j-nsp] Aggregate policer config > > > Hello, > > A customer with two connection

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Ben Dale
On 9 Apr 2015, at 10:22 am, Mark Tees wrote: > I would be curious to know if/how the aggregate behaviour works > between different line cards/PFE. I was wondering this too, so I did a bit of digging - Page 198 of Doug Hanks' MX Series book suggests it doesn't - quoting: "The same filter can

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Mark Tees
I would be curious to know if/how the aggregate behaviour works between different line cards/PFE. Just to clarify here: set firewall policer POLICER-800M filter-specific set firewall policer POLICER-800M if-exceeding bandwidth-limit 800m set firewall policer POLICER-800M if-exceeding burst-size-l

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Ben Dale
Aggregate policing should be the default behaviour for a *filter*, as long as you don't apply the "interface-specific" knob. Create a dedicated filter for this customer and apply it to both interfaces. set firewall family any filter CUST-A-800M term POLICE-800M then policer POLICER-800M set fir

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Chris Kawchuk
Err, I thought he had unlike-speeds for interfaces? > > Customer Interface 1 is a VLAN on a 10G interface > Customer Interface 2 is a VLAN on a 1G interface Unless he does active-passive 1+1, but dunno if JunOS supports unlike physical interface speeds. plus means direct physical connection, i

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Mark Tinka
On 8/Apr/15 15:27, Levi Pederson wrote: > Peter, > > Would an aggregate interface assist in this? If It can be done in your > logical scheme, the aggregate interface would provide a simple way to apply > the entire X bandwidth no matter the pipes up. Juniper do support aggregate application of a

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Levi Pederson
Peter, Would an aggregate interface assist in this? If It can be done in your logical scheme, the aggregate interface would provide a simple way to apply the entire X bandwidth no matter the pipes up. Thank you, *Levi Pederson* Mankato Networks LLC cell | 612.481.0769 work | 612.787.7392 levipe

Re: [j-nsp] Aggregate policer config

2015-04-08 Thread Peter Ehiwe
have you considered writing an event script for this ? On Tue, Apr 7, 2015 at 10:15 PM, Matthew Crocker wrote: > > Hello, > > A customer with two connections to my mx240. I want to police their total > bandwidth to 800mbps. Right now I have a 800mbps policer but that gives them > 800mbps on

[j-nsp] Aggregate policer config

2015-04-07 Thread Matthew Crocker
Hello, A customer with two connections to my mx240. I want to police their total bandwidth to 800mbps. Right now I have a 800mbps policer but that gives them 800mbps on each circuit. Customer Interface 1 is a VLAN on a 10G interface Customer Interface 2 is a VLAN on a 1G interface Each int