Routing

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Policer Layer2-policer

    Posted 10-19-2021 18:46
    Hello,
    I'm studying Junos OS on a J2320.
    I configured the following Policer for bandwidth control:

    firewall {
    policer teste {
    logical-interface-policer;
    if-exceeding {
    bandwidth-limit 30m;
    burst-size-limit 2m;
    }
    then discard;

    So I'm applying this Policer to the interface:
    #set interfaces ge-0/0/2.0 layer2-policer input-policer teste

    So, when applying commit, the following error occurs:
    "error: dfwd_config_read_interfaces_ifl_layer2:5762 Error "layer2-policer" is not supported for interface ge-0/0/2."


    Can anyone tell me how to solve this problem? I only managed to apply the policer using "Family Inet".

    Thanks




    ------------------------------
    Roberto Silva
    ------------------------------


  • 2.  RE: Policer Layer2-policer

     
    Posted 10-19-2021 18:51
    Could you share what version of Junos is running on your j2320
    show version

    And the configuration of the interface indicated
    show configuration interfaces ge-0/0/2

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Policer Layer2-policer

    Posted 10-20-2021 16:29
    Thanks, Steve, for answering


    1) Juno OS version: Model: j2320, JUNOS Software Release [9.3S7.2]
    I tried to update to the latest version 12.1X46, but the update fails.


    2) the interface is currently empty: root# run show configuration interfaces ge-0/0/2
    description InterfaceTeste;
    note: I tried to apply the same rule to other interfaces




    ------------------------------
    Roberto Silva
    ------------------------------



  • 4.  RE: Policer Layer2-policer

    Posted 10-19-2021 19:54
    Try this:


    set interfaces ge-0/0/2.0 family inet policer input teste

    BR,



    Em ter., 19 de out. de 2021 às 19:46, Roberto Silva via Juniper Networks <Mail@community.juniper.net> escreveu:
    Hello, I'm studying Junos OS on a J2320. I configured the following Policer for bandwidth control: firewall { policer teste { logical-interface...
    Earn 6 Juniper certifications.
    Free training/Discounted exams
    Juniper Email Header

    Routing

    Post New Message
    Policer Layer2-policer
    Reply to Group Reply to Sender
    Roberto Silva
    Oct 19, 2021 6:46 PM
    Roberto Silva
    Hello,
    I'm studying Junos OS on a J2320.
    I configured the following Policer for bandwidth control:

    firewall {
    policer teste {
    logical-interface-policer;
    if-exceeding {
    bandwidth-limit 30m;
    burst-size-limit 2m;
    }
    then discard;

    So I'm applying this Policer to the interface:
    #set interfaces ge-0/0/2.0 layer2-policer input-policer teste

    So, when applying commit, the following error occurs:
    "error: dfwd_config_read_interfaces_ifl_layer2:5762 Error "layer2-policer" is not supported for interface ge-0/0/2."


    Can anyone tell me how to solve this problem? I only managed to apply the policer using "Family Inet".

    Thanks




    ------------------------------
    Roberto Silva
    ------------------------------
      Reply to Group Online   View Thread   Recommend   Forward  



     
    You are subscribed to "Routing" as rafael@iagente.com.br. To change your subscriptions, go to My Subscriptions. To unsubscribe from this community discussion, go to Unsubscribe.





  • 5.  RE: Policer Layer2-policer

    Posted 10-20-2021 16:29
    Thank you Rafael for answering.

    Configuring Policer within the Inet and Inet6 families works 100%. The real problem is an error when applying the layer 2 control.


    Configuring Policer within the Inet and Inet6 families works 100%. The real problem is an error when applying the layer 2 control. And I can't find anything on the forum or google regarding this error.



    BR,

    ------------------------------
    Roberto Silva
    ------------------------------



  • 6.  RE: Policer Layer2-policer

     
    Posted 11-05-2021 05:45
    To apply the layer 2 or 3 policer to an interface you do have to have the full matching configuration on the interface itself. 

    Add the unit zero and layer two parameters to ge-0/0/2 and see if the result changes.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 7.  RE: Policer Layer2-policer

    Posted 11-05-2021 14:20

    what Steve said about the unit is correct, i did a quick test in my VMX no commit errors. 


    root@PE2# show | compare
    [edit interfaces]
    + ge-0/0/1 {
    + unit 0 {
    + layer2-policer {
    + input-policer test;
    + }
    + family inet {
    + address 1.1.1.1/30;
    + }
    + }
    + }
    [edit]
    + firewall {
    + policer test {
    + logical-interface-policer;
    + if-exceeding {
    + bandwidth-limit 100m;
    + burst-size-limit 1m;
    + }
    + then discard;
    + }
    + }

    of course there is a big difference between a J series and an MX, and our version is also quite distant from each other, if you keep getting the errors that might be a limitation of your hardware/software
     



    ------------------------------
    GABRIEL FLORES
    ------------------------------