Junos OS

Hello all,

  I have set up a rate limit policer. But, it seems the limit is shared between all IPs. If I want each IP has their own limit, does that mean I need to add 1 policer for each IP? Or, is there any simpler way? FYI, my router is J4350.

Thanks

Pang

    policer one-limit {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 100k;
        }
        then discard;
    }
---------------------------------------------
        filter onembps {
            term rate-limit {
                from {
                    source-address {
                        192.168.0.10/32;
                        192.168.0.11/32
                    }
                }
                then {
                    policer one-limit;
                    packet-mode;
                    accept;
                }
            }

A policer applied to an interface won't have the granularity to distinguish between different IP addresses.  To accomplish what you want to do you'll hve to create a filter like you show in the second part of the configuration you posted.  I beleive you'll have to create a term ( you should be able to use the same policer in evry term) for every IP you want to rate limit, and then of course apply the filter to the appropriate interface.

I see.

So, I don't need different policer, but need different term, right?

I will try and see. I will post my result here.

Thanks B2

Pang

If you are trying to configure rate limiting on a per-prefix basis, then try prefix specific actions in your firewall filter.  Link below.

http://www.juniper.net/techpubs/software/junos/junos70/swconfig70-policy/html/policer-config9.html