How to limit the traffic rate (bandwidth) on Juniper SRX 210 interface acting as switch
> First create a l3-interface to the VLAN you are trying to limit
>This way you will apply rate limit filter on transit traffic going in / out of VLAN e.g.
1) Filter Definition
firewall {
policer 2Mbps {
if-exceeding {
bandwidth-limit 2m;
burst-size-limit 100k;
}
then discard;
}
filter Filter-2Mbps {
term a {
from {
source-address {
192.168.1.0/24;
}
}
then {
policer 2Mbps;
accept;
}
}
}
}
2) Apply on VLAN Interface
interfaces {
vlan {
unit 0 {
family inet {
filter {
output 2Mbps;
}
address 192.168.1.1/24;
}
}
}
}
>This way you will apply rate limit filter on transit traffic going in / out of VLAN e.g.
1) Filter Definition
firewall {
policer 2Mbps {
if-exceeding {
bandwidth-limit 2m;
burst-size-limit 100k;
}
then discard;
}
filter Filter-2Mbps {
term a {
from {
source-address {
192.168.1.0/24;
}
}
then {
policer 2Mbps;
accept;
}
}
}
}
2) Apply on VLAN Interface
interfaces {
vlan {
unit 0 {
family inet {
filter {
output 2Mbps;
}
address 192.168.1.1/24;
}
}
}
}
Comments