if-exceeding-pps (Policer)
Syntax
if-exceeding-pps {
pps-limit pps;
packet-burst packets;
}
Hierarchy Level
[edit dynamic-profiles profile-name firewall policer policer-name], [edit firewall policer policer-name], [edit logical-systems logical-system-name firewall policer policer-name]
Description
Configure rate limits in packets per second for a single-rate two-color policer when policing is desired on a packets-per-second basis rather than a bits-per-second basis. This can help protect against distributed denial of service (DDoS) attacks.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 16.1.