Switching

Hi mates,

I intend to configure rate-limiting on an ex4200 switch. I have an Ex 4200 switch and i am peering with 3Service Providers with BGP. I want to rate-limit the traffic that i get from each peer and send to each peer.I am new to juniper and what i have done is below. Please correct me where i am wrong and while doing so, please do so with with the set commands as i am yet to be able to interprete the outputs in curly brackets properly.

[edit firewall]

set policer RATELIMIT if-exceeding bandwidth-limit 6000000000 burst-size-limit 31250000
set policer RATELIMIT then discard

set policer RATELIMITONE if-exceeding bandwidth-limit 7040000000 burst-size-limit 31250000 
set policer RATELIMITONE then discard

set policer RATELIMITTWO if-exceeding bandwidth-limit 8064000000 burst-size-limit 31250000
set policer RATELIMITTWO then discard

[edit firewall family ethernet-switching]

set filter RATELIMIT term DROP then discard

set filter RATELIMITONE term DROP then discard

set filter RATELIMITTWO term DROP then discard

[edit interfaces]

set ge-0/0/6 unit 0 family ethernet-switching

set ge-0/0/6 unit 0 family ethernet-switching filter input RATELIMIT

set ge-0/0/6 unit 0 family ethernet-switching filter output RATELIMIT

set ge-0/0/7 unit 0 family ethernet-switching

set ge-0/0/7 unit 0 family ethernet-switching filter input RATELIMITONE

set ge-0/0/7 unit 0 family ethernet-switching filter output RATELIMITONE

set ge-0/0/8 unit 0 family ethernet-switching

set ge-0/0/8 unit 0 family ethernet-switching filter input RATELIMITTWO

set ge-0/0/8 unit 0 family ethernet-switching filter output RATELIMITTWO

Thank you.

Hi

The below is an example for rate limiting one interface.

Policer

======

set firewall policer Policer_60M if-exceeding bandwidth-limit 60m
set firewall policer Policer_60M if-exceeding burst-size-limit 1m
set firewall policer Policer_60M then discard

FW Filter

=======

set firewall family ethernet-switching filter TEST1 term 1 then accept
set firewall family ethernet-switching filter TEST1 term 1 then policer Policer_60M

Applying FW Filter to Interface

=======================

set interfaces ge-0/0/7 unit 0 family ethernet-switching filter input TEST1

Shaping for output

===============
set class-of-service interfaces ge-0/0/7 shaping-rate 60m

AFAIK, EX switches doesn't support output policing. Therefore you need to configure shaping on output side.

Regards,

Moses N

Moses, Thank you very much.

thanks much both. it working