• Processing of Hierarchical Policers on page 928
• Configuring Aggregate Parent and Child Policers on ACX Series Routers on page 931
Configuring Aggregate Parent and Child Policers on ACX Series Routers
On ACX Series routers, two-level ingress hierarchical policing is supported. Single-level
policers define a single bandwidth profile. You must first define the child or subordinate
policers and associate or link them with the aggregate parent policer, which is globally
applicable for the entire system. You can configure the mode of hierarchical or aggregate
policing for the child policers, such as peak mode, guarantee mode, or hybrid mode of
policing.
NOTE: Hierarchical policer is not applicable on ACX5048 and ACX5096
routers.
NOTE: The hierarchical policing mechanism on ACX routers is different from
the hierarching policing capability supported on MX Series routers. On MX
Series routers, with a hierarchical policer, only one child or subordinate policer
can be configured under a parent, top-level policer, whereas on ACX Series
routers, you can aggregate and specify multiple child policers under a single
parent policer. The hierarchical policing methodology on ACX routers is also
called aggregate policing. The hierarchical-policer statement and its
substatements at the [edit firewall] hierarchy level that are supported on MX
Series routers are not available for ACX Series routers.
To configure child or micro policers for an aggregate parent policer and associate the
parent policer with the child policers:
1. Configure one normal policer as a child policer and specify the aggregate policing
mode.
user@host# set policer mi_pol_1 if-exceeding bandwidth-limit 25m
user@host# set policer mi_pol_1 if-exceeding burst-size-limit 3k
user@host# set policer mi_pol_1 if-exceeding aggregate-policing policer mi_pol_x
aggregate-sharing-mode peak;
user@host# set policer mi_pol_1 then discard
2. Configure another normal policer as a child policer and specify the aggregate policing
mode. The aggregate-sharing-mode option is a Packet Forwarding Engine statement.
user@host# set policer mi_pol_2 if-exceeding bandwidth-limit 30m
user@host# set policer mi_pol_2 if-exceeding burst-size-limit 30k
user@host# set policer mi_pol_2 if-exceeding aggregate-policing policer mi_pol_x
aggregate-sharing-mode peak;
user@host# set policer mi_pol_2 then discard
931Copyright © 2017, Juniper Networks, Inc.
Chapter 27: Configuring Class of Service