Juniper EX9200 Series

}
policer policer-name {
filter-specific;
if-exceeding {
(bandwidth-limit bps | bandwidth-percent percentage);
burst-size-limit bytes;
}
logical-bandwidth-policer;
logical-interface-policer;
physical-interface-policer;
then {
discard;
forwarding-class class-name;
loss-priority (high | low | medium-high | medium-low);
}
}
three-color-policer policer-name {
action {
loss-priority high then discard;
}
filter-specific;
logical-interface-policer;
physical-interface-policer;
shared-bandwidth-policer;
single-rate {
(color-aware | color-blind);
committed-burst-size bytes;
committed-information-rate bps;
excess-burst-size bytes;
}
two-rate {
(color-aware | color-blind);
committed-burst-size bytes;
committed-information-rate bps;
peak-burst-size bytes;
peak-information-rate bps;
}
}
}
firewall {
family any {
filter filter-name {
interface-shared;
term term-name {
from {
(forwarding-class [ class-names ] | forwarding-class-except [ class-names ]);
interface interface-name;
interface-set set-name;
(loss-priority [ priorities ] | loss-priority-except [ priorities ]);
(packet-length [ values ] | packet-length-except [ values ]);
}
then {
... statements in Common Firewall Actions on page 33 PLUS ...
(accept | discard);
}
39Copyright © 2013, Juniper Networks, Inc.
Chapter 4: Configuration Statements