SRX

Hello,

I would like to also set download bandwidth limit for ge-0/0/11. when i set followings coonfig there seem like to limit only upload. please see my current configuration below;

-----------------------------------

ge-0/0/11 {
unit 0 {
family inet {
filter {
input filter-1.5mpbs;
}
address 192.168.102.1/24;
}
}
}

-------------------------

firewall {
policer 1.5mpbs {
if-exceeding {
bandwidth-limit 1048576;
burst-size-limit 262144;
}
then discard;
}
filter filter-1.5mpbs {
term a {
from {
source-address {
192.168.102.0/24;
}
}
then {
policer 1.5mpbs;
accept;
}
}
term b {
then accept;
}
}
}

thanks,

George

Hello ,

For setting the download limit , I would suggest to make the same filter as Input in your WAN Interface  .

You can try putting the same filter as output to the LAN interface :

ge-0/0/11 {
unit 0 {
family inet {
filter {
input filter-1.5mpbs;

output filter-1.5mpbs;
}
address 192.168.102.1/24;
}
}
}

Hello,

download bandwdith still hight. upload is okey.

ge-0/0/11 {
unit 0 {
family inet {
filter {
input filter-1.5mpbs;
output filter-1.5mpbs;
}
address 192.168.102.1/24;
}
}
}

thanks,

George

Hello ,

Did you try to put this as input in your WAN Interface and check  ? Please check the same and let us know . 

Hello,

sorry i just confirm that should i input also in my WAN link for that command too?? if so others port maybe slow too?? 

here's WAN interface

ge-0/0/7 {
unit 0 {
family inet {
address 100.80.0.162/30;
}
}
}

thanks,

George

Hello ,

Normally if you want to rate limit the internet bandwidth  , we apply it in the input WAN ineterface . Is this your requirment or Just you need to rate limit to only one LAN segment ?

Hello,

i just want to rate limit to only one LAN segment (192.168.102.0/24, ge-0/0/11). here is my config;

WAN interface ge-0/0/7

LANs ge-0/0/11 (limit upload and download should be 1.5 mbps)

ge-0/0/4 (full bandwidth)

thanks,

George

Hello ,

Found the issue , we need to make a different firewall filter :

filter filter-1.5mpbs-download {
term a {
from {
destination-address {
192.168.102.0/24;
}
}
then {
policer 1.5mpbs;
accept;
}
}
term b {
then accept;
}
}
}

Apply it in interface :

ge-0/0/11 {
unit 0 {
family inet {
filter {
input filter-1.5mpbs;
output filter-1.5mpbs-download;
}
address 192.168.102.1/24;
}
}
}

Hello Sam,

apprecaite your kindess. It's working.

thanks,

George

Hello George ,

Thanks for the update . Glad that it worked .

Hi

This policer configuration is not working for virtual routing instances.

Let me know is there any work around.

Thanks,

AN