Hi
My internet bandwidth is 30 Mbps.
I have the policer configured to limit upload and download bandwidth to 2 Mbps to certain user groups.
My LAN is connected to ge-0/0/0 and WAN is connected to ge-0/0/2 interfaces.
The folowing is my policer and filter configured.
set policy-options prefix-list 2mb_group 192.168.1.211/32
set policy-options prefix-list 2mb_group 192.168.1.213/32
set policy-options prefix-list 2mb_group 192.168.1.218/32
set firewall policer limit_2mbps if-exceeding bandwidth-limit 2m
set firewall policer limit_2mbps if-exceeding burst-size-limit 62k
set firewall policer limit_2mbps then discard
Filter for upload traffic
set firewall filter input-limit term 1 from source-prefix-list 2mb_group
set firewall filter input-limit term 1 then policer limit_2mbps
set firewall filter input-limit term 1 then accept
set firewall filter input-limit term last then accept
Filter for download tarffic
set firewall filter output-limit term 1 from destination-prefix-list 2mb_group
set firewall filter output-limit term 1 then policer limit_2mbps
set firewall filter output-limit term 1 then accept
set firewall filter output-limit term last then accept
Upload Filter applied on Input direction in LAN interface
set interfaces ge-0/0/0 unit 0 description Local-LAN
set interfaces ge-0/0/0 unit 0 family inet filter input input-limit
set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.1/24
Download Filter applied on Input direction in WAN interface
set interfaces ge-0/0/2 unit 0 description "WAN"
set interfaces ge-0/0/2 unit 0 family inet filter input output-limit
set interfaces ge-0/0/2 unit 0 family inet address 111.139.102.80/30
Am able to suceed for the upload limit (nearing 2 mbps) but could not control the download limit. Am getting the full bandwidth.
If i applied the download filter in the output direction on LAN interface, then am getting very low download less than 128kbps..
Let me have your suggestion to fine tune the errors.
Regards,
AN