Routing

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.

  • 1.  Shape Circuit to 1 Gbps

    Posted 06-05-2023 17:09

    Hello Networkers 

    I need to shape an Internet circuit to just under 1 Gbps using a Juniper MX480. Goal is to make sure we never hit a policer configured by the provider of the layer 2 circuit. 

    I believe we want to use a firewall filter to accomplish this goal. Can you please point in the right direction to make this configuration? 

    I have provided. 

    • show version
    • config of the interface 
    • show chassis hardware 

    Show Version

    Model: mx480
    Junos: 22.1R3.9

     show configuration interfaces xe-0/3/1.2168 | display set
    set interfaces xe-0/3/1 unit 2168 description "DIA"
    set interfaces xe-0/3/1 unit 2168 vlan-id 2168
    set interfaces xe-0/3/1 unit 2168 family inet address X.X.X.X/31

    show chassis hardware
    Hardware inventory:
    Item             Version  Part number  Serial number     Description
    Chassis                                X      MX480
    Midplane         REV 05   710-017414   X          MX480 Midplane
    FPM Board        REV 02   710-017254   X          Front Panel Display
    PEM 0            Rev 09   740-029970   X       PS 1.4-2.52kW; 90-264V AC in
    PEM 1            Rev 10   740-029970   X       PS 1.4-2.52kW; 90-264V AC in
    PEM 2            Rev 09   740-029970   X       PS 1.4-2.52kW; 90-264V AC in
    Routing Engine 0 REV 09   740-031116   X     RE-S-1800x4
    Routing Engine 1 REV 08   740-031116   X      RE-S-1800x4
    CB 0             REV 07   750-062572   X        Enhanced MX SCB 2
    CB 1             REV 05   750-055976   X        Enhanced MX SCB 2
    FPC 0            REV 33   750-028467   X      MPC 3D 16x 10GE
      CPU            REV 11   711-029089   X          AMPC PMB
      PIC 0                   BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
        Xcvr 0       REV 01   740-031981   X       SFP+-10G-LR
        Xcvr 1       REV 01   740-031980   X       SFP+-10G-SR
        Xcvr 3       REV 01   740-031981   X      SFP+-10G-LR
      PIC 1                   BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
        Xcvr 0       REV 01   740-031981   X       SFP+-10G-LR
        Xcvr 1       REV 01   740-031981   X       SFP+-10G-LR
        Xcvr 2       REV 01   740-031980   X       SFP+-10G-SR
        Xcvr 3       REV 01   740-031980   X       SFP+-10G-SR
      PIC 2                   BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
        Xcvr 0       REV 01   740-031981   X      SFP+-10G-LR
        Xcvr 1       REV 01   740-031981   X     SFP+-10G-LR
        Xcvr 2       REV 01   740-031980   X       SFP+-10G-SR
        Xcvr 3       REV 01   740-031980   X       SFP+-10G-SR
      PIC 3                   BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
        Xcvr 0       REV 01   740-031981   X      SFP+-10G-LR
        Xcvr 1       REV 01   740-031981   X       SFP+-10G-LR
        Xcvr 2       REV 01   740-031980   X     SFP+-10G-SR
        Xcvr 3       REV 01   740-031980   X       SFP+-10G-SR

    Thank you very much for your assistance, 



    ------------------------------
    JUSTIN MORSE
    ------------------------------


  • 2.  RE: Shape Circuit to 1 Gbps

    Posted 06-05-2023 17:11

    Sounds like you would just apply your own policer to manage the over subscription on the interface similar to this.

    https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/example/cos-tcm-input-qfx-series.html



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------

    Original Message


  • 3.  RE: Shape Circuit to 1 Gbps
    Best Answer

    Posted 06-05-2023 18:23

    Hello

    Shape is easy 

    set firewall policer 950Mbps if-exceeding bandwidth-limit 950m
    set firewall policer 950Mbps if-exceeding burst-size-limit 10m
    set firewall policer 950Mbps then discard

    set firewall family ethernet-switching filter LIMITER term 1 then policer 950Mbps
    set firewall family ethernet-switching filter LIMITER term 2 then discard

    set interfaces xe-0/3/1 unit 2168 family inet filter input LIMTER
    set interfaces xe-0/3/1 unit 2168 family inet filter output LIMTER

    I hope this is what you wanted to do and what I wrote will help you



    ------------------------------
    Grzegorz Dacka
    ------------------------------

    Original Message


  • 4.  RE: Shape Circuit to 1 Gbps

    Posted 06-06-2023 10:57

    Thank you very much Grzegorz Dacka here is the final config I used. 

    set firewall policer 950Mbps if-exceeding bandwidth-limit 950m

    set firewall policer 950Mbps if-exceeding burst-size-limit 10m

    set firewall policer 950Mbps then discard

    set firewall family inet filter LIMITER term 1 then policer 950Mbps

    set firewall family inet filter LIMITER term 2 then discard

    set interfaces xe-0/3/1 unit 2168 family inet filter input LIMITER

    set interfaces xe-0/3/1 unit 2168 family inet filter output LIMITER



    ------------------------------
    JUSTIN MORSE
    ------------------------------

    Original Message