Related Documentation
- EX, M, MX, T Series
- Two-Color Policer Configuration Overview
- Three-Color Policer Configuration Overview
- Example: Configuring a Three-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, T Series
- Example: Configuring a Two-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, SRX, T Series
- interface-specific (Firewall Filters)
- logical-interface-policer
Logical Interface (Aggregate) Policer Overview
A logical interface policer—also called an aggregate policer—is a two-color or three-color policer that defines traffic rate limiting that you can apply to input or output traffic for multiple protocol families on the same logical interface without creating multiple instances of the policer.
To configure a single-rate two-color logical interface policer, include the logical-interface-policer statement at one of the following hierarchy levels:
- [edit firewall policer policer-name]
- [edit logical-systems logical-system-name firewall policer policer-name]
To configure a single-rate or two-rate three-color logical interface policer, include the logical-interface-policer statement at one of the following hierarchy levels:
- [edit firewall three-color-policer name]
- [edit logical-systems logical-system-name firewall three-color-policer name]
 | Note: A three-color policer can be applied to Layer 2 traffic as a logical interface policer only. You cannot apply a three-color policer to Layer 2 traffic as a physical interface policer (through a firewall filter). |
You apply a logical interface policer to Layer 3 traffic directly to the interface configuration at the logical unit level (to rate-limit all traffic types, regardless of the protocol family) or at the protocol family level (to rate-limit traffic of a specific protocol family). It is OK to reference a logical interface policer from a stateless firewall filter term and then apply the filter to a logical interface.
You can apply a logical interface policer to unicast traffic only. For information about configuring a stateless firewall filter for flooded traffic, see “Applying Filters to Forwarding Tables” in the “Traffic Sampling, Forwarding, and Monitoring” section of the Routing Policy Configuration Guide.
To display a logical interface policer on a particular interface, issue the show interfaces policers operational mode command.
Related Documentation
- EX, M, MX, T Series
- Two-Color Policer Configuration Overview
- Three-Color Policer Configuration Overview
- Example: Configuring a Three-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, T Series
- Example: Configuring a Two-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, SRX, T Series
- interface-specific (Firewall Filters)
- logical-interface-policer
Modified: 2016-02-23
Related Documentation
- EX, M, MX, T Series
- Two-Color Policer Configuration Overview
- Three-Color Policer Configuration Overview
- Example: Configuring a Three-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, T Series
- Example: Configuring a Two-Color Logical Interface (Aggregate) Policer
- EX, M, MX, PTX, SRX, T Series
- interface-specific (Firewall Filters)
- logical-interface-policer
