SRX

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  set download bandwdith on SRX

    Posted 08-03-2015 21:57

    Hello,

     

    I would like to also set download bandwidth limit for ge-0/0/11. when i set followings coonfig there seem like to limit only upload. please see my current configuration below;

    -----------------------------------

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

    -------------------------

    firewall {
    policer 1.5mpbs {
    if-exceeding {
    bandwidth-limit 1048576;
    burst-size-limit 262144;
    }
    then discard;
    }
    filter filter-1.5mpbs {
    term a {
    from {
    source-address {
    192.168.102.0/24;
    }
    }
    then {
    policer 1.5mpbs;
    accept;
    }
    }
    term b {
    then accept;
    }
    }
    }

     

    thanks,

    George



  • 2.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 22:13

    Hello ,

     

    For setting the download limit , I would suggest to make the same filter as Input in your WAN Interface  .

     

    You can try putting the same filter as output to the LAN interface :

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;

    output filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

     



  • 3.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:00

    Hello,

     

    download bandwdith still hight. upload is okey.

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    output filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

     

    thanks,

    George



  • 4.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 23:07

    Hello ,

     

    Did you try to put this as input in your WAN Interface and check  ? Please check the same and let us know . 



  • 5.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:17

    Hello,

     

    sorry i just confirm that should i input also in my WAN link for that command too?? if so others port maybe slow too?? 

     

    here's WAN interface

    ge-0/0/7 {
    unit 0 {
    family inet {
    address 100.80.0.162/30;
    }
    }
    }

     

    thanks,

    George



  • 6.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 23:41

    Hello ,

     

    Normally if you want to rate limit the internet bandwidth  , we apply it in the input WAN ineterface . Is this your requirment or Just you need to rate limit to only one LAN segment ?



  • 7.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:51

    Hello,

     

    i just want to rate limit to only one LAN segment (192.168.102.0/24, ge-0/0/11). here is my config;

    WAN interface ge-0/0/7

    LANs ge-0/0/11 (limit upload and download should be 1.5 mbps)

    ge-0/0/4 (full bandwidth)

     

    thanks,

    George



  • 8.  RE: set download bandwdith on SRX
    Best Answer

     
    Posted 08-03-2015 23:58

    Hello ,

     

    Found the issue , we need to make a different firewall filter :

     

    filter filter-1.5mpbs-download {
    term a {
    from {
    destination-address {
    192.168.102.0/24;
    }
    }
    then {
    policer 1.5mpbs;
    accept;
    }
    }
    term b {
    then accept;
    }
    }
    }

     

    Apply it in interface :

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    output filter-1.5mpbs-download;
    }
    address 192.168.102.1/24;
    }
    }
    }



  • 9.  RE: set download bandwdith on SRX

    Posted 08-04-2015 01:36

    Hello Sam,

     

    apprecaite your kindess. It's working.

     

    thanks,

    George



  • 10.  RE: set download bandwdith on SRX

     
    Posted 08-04-2015 02:20

    Hello George ,

     

    Thanks for the update . Glad that it worked .



  • 11.  RE: set download bandwdith on SRX

    Posted 11-19-2017 08:01

    Hi

    This policer configuration is not working for virtual routing instances.

    Let me know is there any work around.

    Thanks,

    AN