You need to "apply" the policier using a firewall filter. What you did was to define the policier values but they are implemented via firwewall filter.
firewall {
family inet {
filter filter-example-1 {
term policer-example-term {
from {
protocol tcp; <your match condition that the traffic is tested on>
}
then {
policer 2300m-pipe; <your action to be taken for this traffic>
}
}
}
Note that the default behavior when using firewall filters is to reject ALL traffic that is not specifcally processed by the match / then clauses. So if you matched on a specific subnet cause that was what you were trying to throttle then you would also need a second term with a clause of accept to allow the remaining "non-matched" traffic to be processed.
IE:
term accept-other-traffic {
then accept;
}
}
}
Kevin Barker
JNCIP-SEC
JNCIS-ENT, FWV, SSL
JNCIA-ER, EX, IDP, UAC, WX
Juniper Networks Certified Instructor
Juniper Networks Ambassador
Juniper Elite Reseller
J-Partner Service Specialist - Implementation
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
