Hi, list.
I have MX480 with MS-MIC16G (Junos 15.1R6.7).
Now I try test config (see bellow) with policer and NAT (over service-set).
Policer in output direction dosn't work.Customer not limited in output
direction.
On input - policer is working.
I checked that the policer is programmed on fpc:
On Monday, December 23, 2013 02:25:34 PM Dennis Bernic
wrote:
> ThankYou!
> It works fine.
> Policer can be called in a firewall filter only if it is
> defined as interface specific.
I wish Junos could support trTCM policers being deployed as
interface policers, rather than as part of a firewal
ThankYou!
It works fine.
Policer can be called in a firewall filter only if it is defined as
interface specific.
On Thu, Dec 19, 2013 at 10:13 AM, Dennis Bernic wrote:
> Hello,
>
> seeking to apply a policer for both ipv4 and ipv6.
> family any filter doesn't allow to math under destination addr
Define policer as a logical interface policer. So it will be the same instance
of the policer on the all families at the same logical unit—
WBR, Nikita V. Shirokov
On Thu, Dec 19, 2013 at 12:15 PM, Dennis Bernic
wrote:
> Hello,
> seeking to apply a policer for both ipv4 and ipv6.
> family any
Hello,
seeking to apply a policer for both ipv4 and ipv6.
family any filter doesn't allow to math under destination address condition.
any clue how to perform this configuration?
running mx80 juniper platform.
BR,
--
Dennis Bernic
CCNP, Ip Network Engeneer
Policers are pretty flexible. It really has to do with how you apply them
to the IFD and IFL. There are options in the firewall filters and
policers to aggregate or deaggregate traffic.
If you want to police traffic per IP, there's something called a
prefix-action that will let you define variou
This depends on how you apply the policer. If you apply a firewall filter
at the logical-unit level with a match clause that lists specific IPs, or
subsets of the prefix to which you refer, then the policer you call in that
firewall filter will only apply to those IPs listed in your match clause.
Just looking for clarification on the policer use. If I have a whole subnet
of ips in say a 10 megabit policer is each ip int eh subnet limited to 10
meg or is the whole subnet limited as a total of all the ips bandwidth?
Mark Jones
Operations
Managed Network Systems
London Desk 519-679-5207
W
Thanks,
I am still stumped on the effect (or seeming lack thereof) of
burst-size-limit given the fact that the same amount of packets is always
getting through the policer on a burst, despite changing this value.
-J Scott
On Fri, Feb 12, 2010 at 7:48 AM, Phill Jolliffe wrote:
> This link cla
This link claims all L2 header is counted. But as best I remember frames FCS
is stripped and regen'd be each PE.
http://www.juniper.net/techpubs/software/junos/junos95/swconfig-vpns/id-11513841.html#id-11525104
Not found a mention of IFG.
On Thu, Feb 11, 2010 at 10:47 PM, Judah Scott wrote:
>
Is there a document that can explain the attached code block for us? In
case the screen shot isn't clear, I am basically just sending a single-shot
of traffic (the packets are sent over 1 second) with, or without, a baseline
constant traffic which is below the policed rate.
Questions I have are:
11 matches
Mail list logo
