Routing

 View Only

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Limit any traffic 10GB interface on MX80 to use 1GB only

    Posted 11-12-2012 13:51

    Hi,

     

    I have 2 MX80s connected to each other via 10GB fiber point-point, I would like to use only 1GB for all traffic and leave 9gb for future. What is the best to achieve this goal via CoS traffic shapping or interface Policiers, I found a link for SRX but the the only internet traffic is being limited

     

    http://forums.juniper.net/t5/SRX-Services-Gateway/SRX210-How-to-limit-internet-traffic-on-interface/td-p/83542

     

    Filter Definition

    firewall {                              
        policer 2Mbps {
            if-exceeding {
                bandwidth-limit 2m;
                burst-size-limit 100k;
            }
            then discard;
        }
        filter Filter-2Mbps {
            term a {
                from {
                    source-address {
                        192.168.1.0/24;
                    }
                }
                then {
                    policer 2Mbps;
                    accept;
                }
            }
        }
    }


    Apply on VLAN Interface ( In my case how does this needs to be edited for any traffic?)

    interfaces {
        vlan {
            unit 0 {
                family inet {
                    filter {
                        output 2Mbps;
                    }
                    address 192.168.1.1/24;
                }
            }
        }
    }


    #limittraffic
    #interfacelimit
    #trafficshapping


  • 2.  RE: Limit any traffic 10GB interface on MX80 to use 1GB only

    Posted 11-13-2012 03:18

    Hi,

     

    I have created a sample configuration for your requirement.

    This would limit any traffic to 1G in both input and output direction.

     

     

    [edit firewall]
    +   policer POLICER-1G {
    +       if-exceeding {
    +           bandwidth-limit 1g;
    +           burst-size-limit 5m;
    +       }
    +       then discard;
    +   }

     


    [edit firewall family inet]
    +     filter Limit-1G {
    +         term 1 {
    +             then {
    +                 policer POLICER-1G;
    +                 accept;
    +             }
    +         }
    +     }

     

    [edit interfaces xe-0/3/0 unit 0 family inet]
    +       filter {
    +           input Limit-1G;
    +           output Limit-1G;
    +       }

     

     Regards,

    Moses N



  • 3.  RE: Limit any traffic 10GB interface on MX80 to use 1GB only

    Posted 11-14-2012 21:33

    Thanks for the configuration, I created similar one but I haven't applied it yet. I have quesiton on the burst-size-limit, how do you normally define that, is it always half of what you define in bandwidth-limit?

     

    Thanks again

     

    Sam

     

     



  • 4.  RE: Limit any traffic 10GB interface on MX80 to use 1GB only
    Best Answer

    Posted 11-15-2012 00:08

    Hi,

     

    Burst size can be calculated in the following ways.

     

    burst-size limit in bytes  =  interface traffic MTU  x  10

    burst-size limit in bytes  =  interface media rate  x  allowable time for bursty traffic  /  8 bits

     

    http://www.juniper.net/techpubs/en_US/junos11.3/topics/reference/general/policer-guidelines-burst-size-calculating.html

     

    Generally 10 times MTU size would be fine.

     

    Regards,

    Moses N



  • 5.  RE: Limit any traffic 10GB interface on MX80 to use 1GB only

    Posted 11-15-2012 17:42

    Thanks for the explanation :), much appreciated