bandwidth-limit (Policer)
Syntax
bandwidth-limit bps;
Hierarchy Level
[edit dynamic-profiles profile-name firewall policer policer-name if-exceeding], [edit firewall policer policer-name if-exceeding], [edit logical-systems logical-system-name policer policer-name if-exceeding]
Description
For a single-rate two-color policer, configure the bandwidth limit as a number of bits per second. Single-rate two-color policing uses the single token bucket algorithm to measure traffic-flow conformance to a two-color policer rate limit.
Traffic at the interface that conforms to the bandwidth limit
is categorized green. Traffic that exceeds the specified rate is also
categorized as green provided that sufficient tokens remain in the
single token bucket. Packets in a green flow are implicitly marked
with low packet loss priority (PLP) and then passed through
the interface.
Traffic that exceeds the specified rate when insufficient tokens remain in the single token bucket is categorized red. Depending on the configuration of the two-color policer, packets in a red traffic flow might be implicitly discarded; or the packets might be re-marked with a specified forwarding class, a specified PLP, or both, and then passed through the interface.
This statement specifies the bandwidth limit as an
absolute number of bits per second. Alternatively, for single-rate
two-color policers only, you can use the bandwidth-percent percentage statement to specify the bandwidth limit
as a percentage of either the physical interface port speed or the
configured logical interface shaping rate.
Single-rate two-color policing allows bursts of traffic for short periods, whereas single-rate and two-rate three-color policing allows more sustained bursts of traffic.
Hierarchical policing is a form of two-color policing that applies different policing actions based on whether the packets are classified for expedited forwarding (EF) or for a lower priority. You apply a hierarchical policer to ingress Layer 2 traffic to allows bursts of EF traffic for short period and bursts of non-EF traffic for short periods, with EF traffic always taking precedence over non-EF traffic.
Options
bps—You
can specify the number of bits per second either as a decimal number
or as a decimal number followed by the abbreviation k (1000), m (1,000,000), or g (1,000,000,000).
Range:
-
(M Series and T Series routers) 8000 through 100,000,000,000
-
(Mx Series routers) 8000 through 18,446,744,073,709,551,615
-
(ACX series routers)
-
Single-Rate Two-Color Policer
22000..400000000000
-
Single-Rate Three-Color Policer
committed-information-rate - 22000..400000000000
-
Two-Rate Three-Color Policer
committed-information-rate - 22000..400000000000
peak-information-rate - 22000..400000000000
-
Hierarchical Policer
committed-information-rate - 22000..400000000000
max-committed-information-rate - 22000..400000000000
-
When you specify a numeric value beyond the supported bandwidth of the PFE, the router caps the bandwidth at the maximum supported bandwidth of the PFE.
Default: None.
Required Privilege Level
firewall—To view this statement in the configuration.firewall-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.
Support at the [edit dynamic-profiles ... if-exceeding] hierarchy level introduced in Junos OS Release 11.4.