Understanding Policers on OVSDB-Managed Interfaces

When you use a Contrail controller to manage VXLANs on a QFX switch (through the Open vSwitch Database—OVSDB—management protocol), the VXLAN interfaces are automatically configured with the flexible-vlan-tagging and encapsulation extended-vlan-bridge statements. You can create family ethernet-switching logical units (subinterfaces) on VXLAN interfaces. This enables you to apply firewall filters with the action three-color-policer to these subinterfaces, which means that you can apply two-rate three-color markers (policers) to OVSDB-managed interfaces. See Example: Applying a Policer to OVSDB-Managed Interfaces for information about how to configure policers on VXLAN interfaces managed by a Contrail controller.