interfaces { ge-0/0/0 { unit 0 { family inet { filter { input qos; output qos; } address 10.1.1.1/24; } } } } firewall { policer host-policer { filter-specific; if-exceeding { bandwidth-limit 256k; burst-size-limit 150k; } then discard; } filter qos { term qos { from { source-address { 10.1.1.2/32; } } then policer host-policer; } term accept-all { then accept; } } }