Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

logical-interface-policer

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
logical-interface-policer;

Hierarchy Level

content_copy zoom_out_map
[edit dynamic-profiles profile-name firewall policer policer-name],
[edit dynamic-profiles profile-name firewall three-color-policer name],
[edit firewall atm-policeratm-policer-name],
[edit firewall policer policer-name],
[edit firewall policer policer-template-name],
[edit firewall three-color-policer policer-name],
[edit logical-systems logical-system-name firewall policer policer-name],
[edit logical-systems logical-system-name firewall three-color-policer name]

Description

Configure a logical interface policer. For PTX series routers running Junos OS Release 18.3R1 or later, you can use this command to configure separate firewall filters for different family address types (IPv4 and IPv6) that share the same interface, and configure the same policer as an action for the filter.

To configure the aggregate policer, configure the firewall policer you want to use as logical-interface-policer. And at the firewall family family-name filter filter-name hierarchy level where you will reference the policer, make the policer an interface-specific firewall filter action.

The sample configuration shows the relationship.

content_copy zoom_out_map
firewall {
    policer Shared_Policer {
      logical-interface-policer;
        if-exceeding {
            bandwidth-limit 100m;
            burst-size-limit 500k;
        }
        then {
            discard;
        }
    }
}
content_copy zoom_out_map
family inet {
    filter filter_name{
       interface-specific; 
        term term_name {
            then {
                policer Shared_Policer;
                count cinet;
            }
        }
    }
}
Note:

Starting in Junos OS Release 12.2R2, on T Series Core Routers only, you can configure an MPLS LSP policer for a specific LSP to be shared across different protocol family types. You must include the logical-interface-policer statement to do so.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

Support at the [edit firewall three-color-policer policer-name] hierarchy level introduced in Junos OS Release 8.2.

Logical systems support introduced in Junos OS Release 9.3.

Support at the [edit dynamic-profiles ... policer policer-name] and [edit dynamic-profiles ... three-color-policer name]hierarchy levels introduced in Junos OS Release 11.4.

Support for PTX series routers with third-generation FPCs added in Junos OS Release 18.3R1.

footer-navigation