Hello,
I am writing for advise about doing policer on family ethernet-switching. I notice that there are command available to apply filter in/out under interface as well as under VLAN. But I'm not sure which option is recommended and efective.
seyma@EX2300# show firewall
family ethernet-switching {
filter VL10-CUST01 {
term 10 {
then policer 100M;
}
}
}
policer 100M {
if-exceeding {
bandwidth-limit 100m;
burst-size-limit 7500000;
}
then discard;
}
###Option 1: Apply under interface
seyma@EX2300# show interfaces ge-0/0/0
description CUST01;
unit 0 {
family ethernet-switching {
interface-mode access;
vlan {
members 10;
}
filter {
input VL10-CUST01;
output VL10-CUST01;
}
storm-control default;
}
}
###Option 2: Apply with VLAN
seyma@EX2300# show vlans
VL10-CUST01 {
vlan-id 10;
forwarding-options {
filter {
input VL10-CUST01;
output VL10-CUST01;
}
}
}
Thanks and regards,