Re: [j-nsp] physical interface policer

2010-10-13 Thread Brad Fleming
I agree with you that this seems like a simple task but in true Juniper fashion, there's a hundred ways to do it depending on your needs! :D NOTE: I've never actually worked with these kinds of policers before so obviously test any suggestions first. I think the physical interface policer

Re: [j-nsp] physical interface policer

2010-10-13 Thread Mac GroupStudy
That makes sense Bit and thanks for the clarification. Hey, so at least I was partially correct! Let me run this by my Juniper peers that do not participate here. On Wed, Oct 13, 2010 at 9:34 AM, Bit Gossip wrote: > Hi Mac, > what you mention will do the job which is to police ALL traffic ingres

Re: [j-nsp] physical interface policer

2010-10-13 Thread Bit Gossip
Hi Mac, what you mention will do the job which is to police ALL traffic ingress into a physical interface which is: - ALL address-families of ALL logical units. This means that I have to create a firewall filter per address-family because the documentation says: 'You cannot specify family any. You

Re: [j-nsp] physical interface policer

2010-10-13 Thread Mac GroupStudy
Let me position my thoughts as well, I have been out of JUNOS for some time but I did get pretty far in my knowledge there along the way. Also, this is from the Juniper site for configuring policers on a physical interface: Applying Firewall Filters That Reference Physical Interface Policers Afte

Re: [j-nsp] physical interface policer

2010-10-13 Thread Mac GroupStudy
Help me with my JUNOS commands structure and interfaces but unit 0 is the physical interface correct? I mean, you always have to configure unit 0 so to me that is just part of the interface configuration. On Wed, Oct 13, 2010 at 8:36 AM, Bit Gossip wrote: > This is Mx480 Junos10.2R2.11 and DPC.

[j-nsp] physical interface policer

2010-10-13 Thread Bit Gossip
This is Mx480 Junos10.2R2.11 and DPC. Any idea why I can not apply a physical-interface-policer to a physical-interface? While it can be applied to 'unit 0' of the same interface. Thanks, bit. [edit interfaces xe-4/1/0] l...@rc2# run show configuration firewall policer L-ECN physical-interface-p