Junos
Highlighted
Junos

Policy Based Traffic Shaping for SRX300

‎06-11-2019 10:26 AM

We are replacing our old SSG5s with newer SRX300s.  We have camera systems at remote sites that people log into from our corporate HQ site and if they're not careful they'll eat up all the bandwidth at the remote site.  What did did with the old SSGs was we implemented traffic shaping via the policies.  It was pretty simple to do, just click a few check boxes in the policy you create and fill in a few fields.  I am now learning the Junos cli and am getting more and more comfortable configuring policies and other things on those SRX300s.  Is there a way to throttle back traffic using a security policy on the SRX300s like you could on the old Netscreen SSGs?

3 REPLIES 3
Junos

Re: Policy Based Traffic Shaping for SRX300

‎06-11-2019 03:27 PM

I miss the simple ScreenOS traffic policer too.  It was a quick elegant solution. 

 

In Junos you can achieve this but you need to setup a policer manually with the target being the protocol that you need to limit.  There is a full example here.

 

https://www.juniper.net/documentation/en_US/junos/topics/example/policer-single-rate-two-color-inter...

 

you will need to observe the protocol and port used by the cameras for the data stream that I assume is what is filling the pipe.  This may be in the device documentation is is likely some udp port streaming.

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Junos

Re: Policy Based Traffic Shaping for SRX300

‎06-11-2019 07:46 PM

Chris,

 

This should perhaps be helpful https://kb.juniper.net/KB28161

 

Cheers

Pooja

Junos

Re: Policy Based Traffic Shaping for SRX300

‎06-29-2019 11:44 AM

Hi 

The class of service is not configured under [security policy] hierachy.

Here is an config example for shaping a traffic:

https://kb.juniper.net/InfoCenter/index?page=content&id=KB22066&actp=search