Routing

 View Only

  • 1.  Policer Layer2-policer

    Posted 10-19-2021 18:46
    Hello,
    I'm studying Junos OS on a J2320.
    I configured the following Policer for bandwidth control:

    firewall {
    policer teste {
    logical-interface-policer;
    if-exceeding {
    bandwidth-limit 30m;
    burst-size-limit 2m;
    }
    then discard;

    So I'm applying this Policer to the interface:
    #set interfaces ge-0/0/2.0 layer2-policer input-policer teste

    So, when applying commit, the following error occurs:
    "error: dfwd_config_read_interfaces_ifl_layer2:5762 Error "layer2-policer" is not supported for interface ge-0/0/2."


    Can anyone tell me how to solve this problem? I only managed to apply the policer using "Family Inet".

    Thanks




    ------------------------------
    Roberto Silva
    ------------------------------


  • 2.  RE: Policer Layer2-policer

    Posted 10-19-2021 18:51
    Could you share what version of Junos is running on your j2320
    show version

    And the configuration of the interface indicated
    show configuration interfaces ge-0/0/2

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Policer Layer2-policer

    Posted 10-20-2021 16:29
    Thanks, Steve, for answering


    1) Juno OS version: Model: j2320, JUNOS Software Release [9.3S7.2]
    I tried to update to the latest version 12.1X46, but the update fails.


    2) the interface is currently empty: root# run show configuration interfaces ge-0/0/2
    description InterfaceTeste;
    note: I tried to apply the same rule to other interfaces




    ------------------------------
    Roberto Silva
    ------------------------------

    Original Message


  • 4.  RE: Policer Layer2-policer

    Posted 10-19-2021 19:54
    Try this:


    set interfaces ge-0/0/2.0 family inet policer input teste

    BR,



    Em ter., 19 de out. de 2021 às 19:46, Roberto Silva via Juniper Networks <Mail@community.juniper.net> escreveu:
    Hello, I'm studying Junos OS on a J2320. I configured the following Policer for bandwidth control: firewall { policer teste { logical-interface...
    Earn 6 Juniper certifications.
    Free training/Discounted exams
    Juniper Email Header

    Routing

    Post New Message
    Policer Layer2-policer
    Reply to Group Reply to Sender
    Oct 19, 2021 6:46 PM
    Roberto Silva
    Hello,
    I'm studying Junos OS on a J2320.
    I configured the following Policer for bandwidth control:

    firewall {
    policer teste {
    logical-interface-policer;
    if-exceeding {
    bandwidth-limit 30m;
    burst-size-limit 2m;
    }
    then discard;

    So I'm applying this Policer to the interface:
    #set interfaces ge-0/0/2.0 layer2-policer input-policer teste

    So, when applying commit, the following error occurs:
    "error: dfwd_config_read_interfaces_ifl_layer2:5762 Error "layer2-policer" is not supported for interface ge-0/0/2."


    Can anyone tell me how to solve this problem? I only managed to apply the policer using "Family Inet".

    Thanks




    ------------------------------
    Roberto Silva
    ------------------------------
      Reply to Group Online   View Thread   Recommend   Forward  



     
    You are subscribed to "Routing" as rafael@iagente.com.br. To change your subscriptions, go to My Subscriptions. To unsubscribe from this community discussion, go to Unsubscribe.





  • 5.  RE: Policer Layer2-policer

    Posted 10-20-2021 16:29
    Thank you Rafael for answering.

    Configuring Policer within the Inet and Inet6 families works 100%. The real problem is an error when applying the layer 2 control.


    Configuring Policer within the Inet and Inet6 families works 100%. The real problem is an error when applying the layer 2 control. And I can't find anything on the forum or google regarding this error.



    BR,

    ------------------------------
    Roberto Silva
    ------------------------------

    Original Message


  • 6.  RE: Policer Layer2-policer

    Posted 11-05-2021 05:45
    To apply the layer 2 or 3 policer to an interface you do have to have the full matching configuration on the interface itself. 

    Add the unit zero and layer two parameters to ge-0/0/2 and see if the result changes.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------

    Original Message


  • 7.  RE: Policer Layer2-policer

    Posted 11-05-2021 14:20

    what Steve said about the unit is correct, i did a quick test in my VMX no commit errors. 


    root@PE2# show | compare
    [edit interfaces]
    + ge-0/0/1 {
    + unit 0 {
    + layer2-policer {
    + input-policer test;
    + }
    + family inet {
    + address 1.1.1.1/30;
    + }
    + }
    + }
    [edit]
    + firewall {
    + policer test {
    + logical-interface-policer;
    + if-exceeding {
    + bandwidth-limit 100m;
    + burst-size-limit 1m;
    + }
    + then discard;
    + }
    + }

    of course there is a big difference between a J series and an MX, and our version is also quite distant from each other, if you keep getting the errors that might be a limitation of your hardware/software
     



    ------------------------------
    GABRIEL FLORES
    ------------------------------