Juniper Networks 10.4 Toconfigure policing and marking of trafficentering a VPLS core:, limitthe aggregate broadcast, unknownunicast, and non-IP multicast to 50 kbps:, theIP multicast traffic:

Toconfigure policing and marking of trafficentering a VPLS core:
1. Configurepolicer bcast-unknown-unicast-non-ip-mcast-policer,a firewall policer to
limitthe aggregate broadcast, unknownunicast, and non-IP multicast to 50 kbps:
[editfirewall]
policerbcast-unknown-unicast-non-ip-mcast-policer{
if-exceeding{
bandwidth-limit50k;
burst-size-limit150k;
}
thenloss-priority high;
}
2. Configurethree-color-policer ip-multicast-traffic-policer,a three-color policer to limit
theIP multicast traffic:
[editfirewall]
three-color-policerip-multicast-traffic-policer{
two-rate{
color-blind;
committed-information-rate4m;
committed-burst-size256k;
peak-information-rate4100000;
peak-burst-size256k;
}
}
3. Configurecustomer-1, a firewall filter thatuses the two policers to limit and mark
customertraffic. Thefirst term marks the IP multicast traffic basedon the destination
MACaddress, and the second term polices the broadcast,unknown unicast, and
non-IPmulticast traffic:
[editfirewall]
familyvpls {
filtercustomer-1 {
termt0 {
from{
destination-mac-address{
01:00:5e:00:00:00/24;
}
}
then{
three-color-policer{
two-rateip-multicast-traffic-policer;
}
forwarding-classexpedited-forwarding;
}
}
termt1 {
from{
traffic-type[ broadcast unknown-unicastmulticast ];
}
thenpolicer bcast-unknown-unicast-non-ip-mcast-policer;
}
}
}
97Copyright© 2010, Juniper Networks,Inc.
Chapter9: Layer 2 FirewallFilters