我在瞻博网络 MX 平台上面临有关防火墙策略的问题。我们有捆绑链路(AE Link),由 2 x 10G 链路组成,P2P IP 在其上配置为客户访问互联网。现在客户希望双向限制为 4 Mbps。使用 Juniper 计算突发大小的方法(即 10G 链路为 625K)不会简单地工作。
有人可以讨论和分享如何在聚合接口上应用速率限制(防火墙策略)的配置吗?我什至浏览了瞻博网络论坛,但似乎还没有结束
配置如下:-
USER@R1> show configuration interfaces ae17.888
vlan-id 888;
family inet {
policer {
input pol-4m;
output pol-4m;
}
address x.x.x.x/31;
USER@R1> show configuration firewall policer pol-4m
if-exceeding {
bandwidth-limit 4m;
burst-size-limit 625k;
}
then discard;
}
USER@R1> show lacp interfaces ae17
Aggregated interface: ae17
LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity
xe-7/0/0 Actor No No Yes Yes Yes Yes Fast Active
xe-7/0/0 Partner No No Yes Yes Yes Yes Fast Active
xe-7/1/0 Actor No No Yes Yes Yes Yes Fast Active
xe-7/1/0 Partner No No Yes Yes Yes Yes Fast Active
LACP protocol: Receive State Transmit State Mux State
xe-7/0/0 Current Fast periodic Collecting distributing
xe-7/1/0 Current Fast periodic Collecting distributing
谢谢