Junos OS

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  QFX5100 how to limit port speed ?

    Posted 11-13-2017 13:53

    i want to limit to 2G , how to add the firewall policer in to the interfaces xe-0/0/46  unit ?

     

    root@# show interfaces xe-0/0/46
    description "[TRANSIT]  ;";
    unit 0 {
    family ethernet-switching {
    interface-mode trunk;
    vlan {
    members V3000;
    }
    }
    }



  • 2.  RE: QFX5100 how to limit port speed ?

     
    Posted 11-13-2017 16:01

    You could use a single rate two color policer for this purpose as outlined here.

     

    https://www.juniper.net/documentation/en_US/junos12.3/topics/reference/general/policer-summary-configuration-two-color.html

     

    This shows both how to configure the policer on the left and where to apply the policer to the interface on the right in the sample configurations.

     



  • 3.  RE: QFX5100 how to limit port speed ?
    Best Answer

    Posted 11-14-2017 01:12

    You can also do something similar to this example:

     

    class-of-service {
            interfaces {
                    xe-0/0/46 {
                            shaping-rate 2g;
                    }
    
    
    firewall {
        family ethernet-switching {
            filter 2G-limit {
                term 1 {
                    then policer 2G-limit;
                }
            }
        }
        policer 2G-limit {
            if-exceeding {
                bandwidth-limit 2g;
                burst-size-limit 1250k;
            }
            then discard;
        }
    }
    
    xe-0/0/46 {
            unit 0 {
                    family ethernet-switching {
                            vlan {
                                    members V3000;
                            }
                            filter {
                                    input 2G-limit;
                            }
                    }
            }
    
    }