Ok in 1st phase we will ensure upload bandwidth distribution for user groups and then in 2nd phase we will ensure download bandwidth distribution to user groups.
*******12 m to 16 m policer*************
edit firewall
edit policer 12m-policer
set if-exceeding burst-size limit 300k
set if-exceeding bandwidth-limit 12m
set then out-of-profile
up
edit policer 16m-policer
set if-exceeding burst-size limit 500k
set if-exceeding bandwidth-limit 16m
set then discard
edit policer 4m-policer
set if-exceeding burst-size limit 125k
set if-exceeding bandwidth-limit 4m
set then discard
up
****Now configure firewall filiter*********
edit family ethernet-switching filter my-filter
set term 1 from interface----------***** configure match condition for 4m traffice*****
set term1 then forwarding-class assured-forwarding loss-priority low
set term 1 then policer 4m-policer next term
set term 2 from interface-----*******set match condtion for traffice 12-16m*******
set term 2 then forwarding-class best-effort loss-priority high
set term 2 then policer 12m-policer next term
set term 3 from interface-----*******set match condtion for traffice 12-16m*******
set term 3 then forwarding-class best-effort loss-priority high
set term 3 then policer 16m-policer accept
====Now apply firewall filter to appropriate ingress interface======
set interface ge-0/0/* unit 0 family ethernet-switching filter input my-filter
===Now coming to scheduler and rewrite rule part=====
edit class-of-service
set schedulers assured-fwd-scheduler priority strict-high
up
set schedulers scheduler best-effort-scheduler buffer-size percent 40
set schedulers scheduler best-effort-scheduler priority low
up
set scheduler-map my-scheduler-map forwarding class assured-forwarding schedulers assured-fwd-scheduler
set scheduler-map my-scheduler-map forwarding class assured-forwarding schedulers best-effort-scheduler
up
exit
*******Uptill this portion incoming bandwifth is ensured************
*****Now output banwidth distribution*********
set interface ge-0/0/* (egress interface to SSG) family ethernet-switching filiter output my-filiter
also visit http://forums.juniper.net/t5/Ethernet-Switching/CoS-on-EX-Series-Switches/m-p/216951, my earlier post on CoS it will be helpful for your
Mark this as accepted solution if it works for you
A Kudos is a good way of appreciation
Kashif Nawaz
JNCIP-Sec JNCIS-Sec JNCIS-Ent JNCIA-Junos