aggregate-policing (ACX Series)
Syntax aggregate-policing {
policer policer-name {
aggregate-sharing-mode (peak | guarantee | hybrid);
}
}
Hierarchy Level [edit firewall policer policer-name if-exceeding]
[edit firewallthree-color-policer policer-name two-rate]
Release Information Statement introduced in Junos OS Release 12.3X54 for ACX Series Routers.
Description Define a child or micro policer and the mode of hierarchical policing for the child policer.
You can configure a normal policer as a child policer or a two-rate three-color policer as
a child policer. You can also define the mode of policing as hybrid, peak, or guarantee.
An aggregate parent policer must be configured to attach or group all child policers
defined with the parent policer that is globally applicable throughout the system.
Options aggregate-policing—Defines the child or micro policer for an aggregate parent policer.
policer policer-name—Name that identifies the policer. The name can contain letters,
numbers, and hyphens (-), and can be up to 255 characters long. To include spaces
in the name, enclose it in quotation marks (“ ”).
aggregate-sharing mode guarantee—Enables bandwidth-guarantee mode, which is used
when the micro-flow policer is used to specify that a portion of the aggregate parent
policer bandwidth is guaranteed for its micro-flow. When this micro-flow contains
no traffic, then amount allocated for this micro-flow out of the aggregate bandwidth
is used by the other micro-flows that are transmitting traffic with a size-limit or
bandwidth that is higher than their respective guaranteed bandwidth rates.
aggregate-sharing mode peak—Enables peak mode, also called bandwidth-protection
mode, which is used when the micro-flow policer is used to specify the maximum
amount of the aggregate parent policer bandwidth that the micro-flow can use. This
mode is used to protect a given micro-flow from starving the other flows. Even when
the other micro-flows contain no traffic (the available aggregate bandwidth rate is
greater than the rate of the particular micro-flow, the micro-flow cannot use more
than the rate configured on its micro-flow policer.
aggregate-sharing mode hybrid—Enables hybrid mode for hiearchical policing, which is a
combination of the bandwidth-guarantee and bandwidth-protection modes, enables
the capabilities of bandwidth restriction and the per-flow bandwidth moderation to
be accomplished simultanouesly. Bandwidth-guarentee or bandwidth-restriction
mode controls the guaranteed rates for a given micro-flow. However, it does not
adminster or manage the manner in which the excess aggregate bandwidth can be
shared among the micro-flows. A certain micro-flow can potentially use all the
excess aggregate bandwidth starving the other micro-flows of any excess bandwidth.
1423Copyright © 2017, Juniper Networks, Inc.
Chapter 41: Configuration Statements