Juniper E320 User Manual

Hierarchical Rate Limits ! 87
Chapter 3: Creating Rate-Limit Profiles
host1(config)#policy-list TOS1_oversubsribed
host1(config-policy-list)#classifier-group A parent-group S
host1(config-policy-list-classifier-group)#rate-limit-profile indiv
host1(config-policy-list-classifier-group)#mark profile A
host1(config--classifier-group)#exit
host1(config-policy-list)#classifier-group B parent-group S
host1(config-policy-list-classifier-group)#rate-limit-profile indiv
host1(config-policy-list-classifier-group)#mark profile BC
host1(config--classifier-group)#exit
host1(config-policy-list)#classifier-group C parent-group S
host1(config-policy-list-classifier-group)#rate-limit-profile indiv
host1(config-policy-list-classifier-group)#mark profile BC
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#parent-group S
host1(config-policy-list-parent-group)#rate-limit-profile S
host1(config-policy-list-parent-group)#exit
Color-Aware Configuration
Common to many rate-limit hierarchies is a large aggregate rate limit that receives
packets from many smaller individual rate limits. An individual rate limit can mark
a packet yellow but, if few individual flows are active, the aggregate rate limit is
likely to try to promote it to green, overriding the individual rate limit. For this
reason, rate limits never promote packets in color; color-aware rate limits use the
incoming color in their algorithm, but the final result is always equal to or less than
the initial packet color.
Rate-limit profiles for rate-limit hierarchies include a non-default configuration
option for color-aware. For two-rate rate limits this option enables the color-aware
algorithm. If hierarchical, TCP-friendly one-rate rate limits have a color-aware
algorithm defined.
In the following color-aware example, the non-preferred packets do not take any
green tokens from rate-limit A, leaving them all for preferred packets. Preferred
packets may take green and also take yellow tokens (which reduces the flow of
non-preferred). In this way the non-preferred packets do not reduce the number of
green preferred packets, only the number of yellow preferred packets; preferred
packets are then marked from a color-mark profile.
class non-preferred parent A
color yellow
class preferred parent A
mark profile cm
parent A
rate-limit A !! a color-aware rate limit
The color-mark profile translates the packet color, which is independent of its type,
to a type-dependent mark for ToS or EXP and applies it to a packet after it has
exited the rate-limit hierarchy. If no translation is configured for a color, then
packets of that color are not changed.

Juniper E320 Specifications

General

Rack Units	1U
Operating System	JUNOS
Product Type	Router
Routing Protocols	BGP, OSPF, IS-IS, RIP
Memory	4 GB
Redundancy	Power supply
Power Supply	AC

Summary

Chapter 2 Creating Policies

Creating Classifier Control Lists

Explains how to create Classifier Control Lists (CLACLs) to define packet flows.

Creating Policy Lists

Details the process of creating policy lists, which contain rules for policy actions.

Creating Classifier Groups and Policy Rules

Describes how to create classifier groups and policy rules within a policy list.

Merging Policies

Applying Policy Lists to Interfaces and Profiles

Details how to assign policy lists to interfaces and profiles for traffic management.

Chapter 3 Creating Rate-Limit Profiles

Rate Limits

Hierarchical Rate Limits

One-Rate Rate-Limit Profiles

Details how to create and configure one-rate rate-limit profiles for TCP applications.

Two-Rate Rate-Limits

Explains how to create two-rate rate-limit profiles for tiered rate-limit services.

Chapter 4 Policy Resources

FPGA Hardware Classifiers

Describes FPGA hardware classifiers used for packet classification with hardware assist.

CAM Hardware Classifiers

Software Classifiers

Chapter 5 Monitoring Policy Management

Overview

Setting a Statistics Baseline

Policy Management show Commands

Lists and describes the show commands used to display policy statistics and configurations.

Packet Flow Monitoring

Explains how to use the policy log rule to capture and monitor packet flows.

Chapter 6 Packet Mirroring

Overview

Introduces packet mirroring for traffic analysis, debugging, and troubleshooting.

Configuring CLI-Based Packet Mirroring

Explains how to use CLI commands to configure and manage packet mirroring.

Configuring RADIUS-Based Mirroring

Details how to configure RADIUS-based mirroring for specific users and sessions.

Conflicts Between CLI-Based and RADIUS-Based Configurations

Resolving and Tracking the Analyzer Device’s Address

Optimizing Packet Mirroring Performance

Logging Packet Mirroring Information

Monitoring Packet Mirroring