Switching

 View Only
last person joined: yesterday 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
Back to discussions
Expand all | Collapse all

CoS ingress policing on MGE inter

  • 1.  CoS ingress policing on MGE inter

    Posted 10-26-2021 12:57
    Edited by Annie Moncure 10-27-2021 09:32
    Hi,
    since the EX4300MP series does not support the "if-exceeding bandwidth-percent" inside a policer FW rule, my question is how to deal with dynamic speed interfaces (mge-)? I cannot determine the interface speed from the interface name anymore.  The can be 2.5, 5G, 10G speeds behind this mge- name. But I cannot police a 2,5G interface the same way as a 10G interface. But I have 24 workstations behind mge- interfaces that I need to police ingress.

    Example:
     
    interfaces {
	mge-0/0/4 {
        unit 0 {
            family ethernet-switching {
                filter {
                    input POLICE_INGRESS_FWFILTER_MGE;
                }
            }
        }
    }
}
firewall {
	policer POLICE_INGRESS_MGE_BESTEFFORT_FWCLASS { 
			if-exceeding {
				bandwidth-limit 9500m;
				burst-size-limit 60m;
			}
			then discard; 		
	}
         filter POLICE_INGRESS_FWFILTER_MGE {
            term POLICE-CATCHALL {
                then {
                    accept;
		    policer POLICE_INGRESS_MGE_BESTEFFORT_FWCLASS;
		}
	     }
	 }
}

    Thanks for helping!