Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

ON THIS PAGE

[atm-policer]
[family]
[filter]
[hierarchical-policer]
[policer]
[three-color-policer]

[edit firewall]

Sub Hierarchies

[edit firewall atm-policer {atm-policer-name}]

[edit firewall family {family-name}]

[edit firewall filter {filter-name}]

[edit firewall hierarchical-policer]

[edit firewall policer {policer-name}]

[edit firewall three-color-policer {name}]

[edit firewall]
arp policer	enhanced-hierarchical-policer	family (Firewall Filter)
family (Firewall)	family (Multifield Classifier)	family (QFX)
hierarchical-policer	hierarchical-policer (aggregate or premium)	interface-set
load-balance-group	no-next-header-to-payload-protocol-mapping	policer
policer (CFM Firewall)	policer (Configuring)	three-color-policer
three-color-policer (Configuring)	three-color-policer (Configuring) (EX)	tunnel-end-point

[atm-policer]

[edit firewall atm-policer {atm-policer-name}]
cdvt	logical-interface-policer

[family]

[edit firewall family {family-name}]
filter	filter (Configuring)	filter (Firewall Filters)

[edit firewall family (inet \| inet6]
service-filter (Firewall)

[edit firewall family (inet \| inet6) filter {filter-name}]
filter-list-template

[edit firewall family (inet \| inet6) filter {filter-name} term {term-name} then]
topology (Filter-Based Forwarding)

[edit firewall family (inet \| inet6) filter {filter-name} term {term-name} then logical-system {logical-system-name}]
topology (Filter-Based Forwarding)

[edit firewall family (inet \| inet6) filter {filter-name} term {term-name} then logical-system {logical-system-name} routing-instance {routing-instance-name}]
topology (Filter-Based Forwarding)

[edit firewall family (inet \| inet6) filter {filter-name} term {term-name} then routing-instance {routing-instance-name}]
topology (Filter-Based Forwarding)

[edit firewall family family-name filter output filter-name]
fast-lookup-filter (PTX)

[edit firewall family {family-name} filter {filter-name}]
accounting-profile (firewall)	enhanced-mode	enhanced-mode-override
fast-lookup-filter	instance-shared	interface-shared
interface-specific	layer2-policer (firewall)	no-incremental-update
physical-interface-filter	promote	scale-mode
scale-optimized	term (Firewall Filter)	transient-filter

[edit firewall family {family-name} filter {filter-name} term {term-name}]
from (Firewall)	then (Filters)	then (Firewall Filters)

[edit firewall family {family-name} filter {filter-name} term {term-name} from]
destination-address (Firewall)	ip-version	rdma-opcode
rdma-opcode	rdma-opcode	slice (firewall filter match condition)
source-address

[edit firewall family {family-name} filter {filter-name} term {term-name} from ip-version {ip-version}]
destination-address (Firewall)	protocol (Firewall Filter)	source-address

[edit firewall family {family-name} filter {filter-name} term {term-name} from ip-version {ip-version} protocol (tcp\|udp)]
destination-port (firewall)	source-port (firewall)

[edit firewall family {family-name} filter {filter-name} term {term-name} then]
decapsulate (Firewall Filter)	dscp (Multifield Classifier)	force-premium (Firewall Filter Action)
forwarding-class (Firewall Filter Action)	forwarding-class (Multifield Classifiers)	loss-priority (Firewall Filter Action)
policer (Firewall Filter Action)	policer-charge	slice (firewall filter action)
three-color-policer (Applying)

[edit firewall family {family-name} filter {filter-name} term {term-name} then decapsulate gre]
interface-group (Decapsulate GRE)

[edit firewall family inet]
prefix-action (Configuring)	simple-filter

[edit firewall family inet filter {firewall filter name} term {term name} from]
fast-lookup-tuple	fast-lookup-tuple-list	loss-priority (Firewall Filter)

[edit firewall family inet filter {filter-name} term {term-name} then]
prefix-action (Firewall Filter Action)	routing-instance

[edit firewall family inet prefix-action {name}]
filter-specific

[edit firewall family inet simple-filter {filter-name}]
term (Simple Filter)

[edit firewall family mpls filter {name} term {name} from]
ip-version (Family MPLS)

[edit firewall family mpls filter {name} term {name} from ip-version]
ipv4 (Family MPLS)	ipv6 (Family MPLS)

[edit firewall family {family-name} service-filter {filter-name}]
term (Firewall Filter)

[edit firewall family {family-name} simple-filter {filter-name}]
term (Firewall Filter)

[edit firewall family {family-name} simple-filter {filter-name} term {term-name} then]
loss-priority (Simple Firewall Filter)

[filter]

[edit firewall filter {filter-name}]
enhanced-mode	enhanced-mode-override

[edit firewall filter {name} term {name} from]
loss-priority (Firewall Filter)

[hierarchical-policer]

[edit firewall hierarchical-policer]
aggregate (Hierarchical Policer)	premium (Hierarchical Policer)	shared-bandwidth-policer (Configuring)

[edit firewall hierarchical-policer aggregate]
if-exceeding (Hierarchical Policer)	if-exceeding-pps (Hierarchical Policer)	then (Hierarchical Policer)

[edit firewall hierarchical-policer aggregate if-exceeding]
bandwidth-limit (Hierarchical Policer)	burst-size-limit (Hierarchical Policer)

[edit firewall hierarchical-policer premium]
if-exceeding (Hierarchical Policer)	if-exceeding-pps (Hierarchical Policer)	then (Hierarchical Policer)

[edit firewall hierarchical-policer premium if-exceeding]
bandwidth-limit (Hierarchical Policer)	burst-size-limit (Hierarchical Policer)

[policer]

[edit firewall policer {policer-name}]
counter	filter-specific	filter-specific (QFX)
if-exceeding (EX)	if-exceeding (Policer)	if-exceeding (QFX)
if-exceeding-pps (Policer)	logical-bandwidth-policer	logical-interface-policer
logical-interface-policer	physical-interface-policer	shared-bandwidth-policer (Configuring)
then (Policer Action)	then (Policers)

[edit firewall policer {policer-name} if-exceeding]
bandwidth-limit	bandwidth-limit (Policer)	bandwidth-percent
burst-size-limit	burst-size-limit (Policer)

[edit firewall policer {policer-name} if-exceeding-pps]
packet-burst (Policer)	pps-limit (Policer)

[three-color-policer]

[edit firewall three-color-policer {name}]
action	action (Policer)	action (QFX)
logical-interface-policer	physical-interface-policer	shared-bandwidth-policer (Configuring)
single-rate	two-rate

[edit firewall three-color-policer {policer-name} action]
loss-priority high then discard (Three-Color Policer)

[edit firewall three-color-policer {policer-name} single-rate]
color-aware	color-blind	committed-burst-size
committed-information-rate	excess-burst-size	excess-burst-size (QFX)

[edit firewall three-color-policer {policer-name} two-rate]
color-aware	color-blind	committed-burst-size
committed-information-rate	peak-burst-size	peak-burst-size (QFX)
peak-information-rate	peak-information-rate (QFX)