Switching

Expand all | Collapse all

Junos layer 2 policing

Jump to Best Answer
  • 1.  Junos layer 2 policing

    Posted 06-27-2019 22:02

    Hello,

     

    I am writing for advise about doing policer on family ethernet-switching. I notice that there are command available to apply filter in/out under interface as well as under VLAN. But I'm not sure which option is recommended and efective.

    seyma@EX2300# show firewall 
    family ethernet-switching {
        filter VL10-CUST01 {
            term 10 {
                then policer 100M;
            }
        }
    }
    policer 100M {
        if-exceeding {
            bandwidth-limit 100m;
            burst-size-limit 7500000;
        }
        then discard;
    }
    ###Option 1: Apply under interface
    seyma@EX2300# show interfaces ge-0/0/0  
    description CUST01;
    unit 0 {
        family ethernet-switching {
            interface-mode access;
            vlan {
                members 10;
            }
            filter {
                input VL10-CUST01;
                output VL10-CUST01;
            }
            storm-control default;
        }
    }
    ###Option 2: Apply with VLAN 
    seyma@EX2300# show vlans 
    VL10-CUST01 {
        vlan-id 10;
        forwarding-options {
            filter {
                input VL10-CUST01;
                output VL10-CUST01;
            }
        }
    }

    Thanks and regards,



  • 2.  RE: Junos layer 2 policing
    Best Answer

    Posted 06-27-2019 22:19