Routing
Highlighted
Routing

Policer limit rate input ? Right or wrong

‎09-21-2017 10:05 AM

Hi all.

 

I'm sure about that most guys use policer to rate input limit, as the following example

 

set firewall policer POLICER_KH_LIMIT if-exceeding bandwidth-limit 40m
set firewall policer POLICER_KH_LIMIT if-exceeding burst-size-limit 100k
set firewall policer POLICER_KH_LIMIT then discard

set firewall family inet filter LIMIT_BW term 1A then policer POLICER_KH_LIMIT 

--------

And then, apply this filter into an interface, for instance

 

set interafces ge-0/0/0 unit 0 family inet filter input LIMIT_BW.

Today, I made a test in my lab, with this configuration, and when I send a flow with 100 Mbps, as I issued the command

 

monitor interface ge-0/0/0

 

I always saw the Input bytes was approximate 100 Mbps, instead of 40 mbs. I tried many times, but the result was the same. What's prolbem ? Or am I wrong ?

 

1 REPLY 1
Highlighted
Routing

Re: Policer limit rate input ? Right or wrong

‎09-21-2017 07:34 PM

Hi,

 

I think it is before the filter is getting applied. Can you please check if you see drops in "show firewall filter LIMIT_BW" output?

 

If the policer limit is hit, you will see the drops in the above counter.

 

Hope this helps

--------------------------------------------------------------------------------------------------------
If this post was helpful, please mark this post as an "Accepted Solution".
Kudos are always appreciated!
--------------------------------------------------------------------------------------------------------

 

Thanks

 

Hope this helps

--------------------------------------------------------------------------------------------------------
If this post was helpful, please mark this post as an "Accepted Solution".
Kudos are always appreciated!
--------------------------------------------------------------------------------------------------------
Feedback