[nznog] Juniper J2320, rate limit based on bgp community (national/international)

21 Jan 2009

      Hey Guys,

Hope this fits in with the AUP, however I'd hope so as not many forums show
how to rate-limit based on national/international traffic as they don't
bill accordingly, however in NZ this is standard practice so hoping someone
with juniper knowledge can assist me here.

Basically I want to allow all traffic to/from national without rate-limit,
then restrict international, for eg 128k.

icepick(a)NCCORE01# show firewall
policer 128k {
    if-exceeding {
        bandwidth-limit 128k;
        burst-size-limit 4500;
    }
    then discard;
}
filter 128k {
    term 1 {
        from {
            forwarding-class assured-forwarding;
        }
        then accept;
    }
    term 2 {
        from {
            forwarding-class best-effort;
        }
        then {
            policer 128k;
            accept;
        }
    }
}

icepick(a)NCCORE01# show policy-options policy-statement Orcon-Primary-In
term 1 {
    from community [ Orcon-Local Orcon-National Orcon-Peering Orcon-Telstra
Orcon-Telecom ];
    then {
        local-preference 110;
        forwarding-class assured-forwarding;
        accept;
    }
}
term 2 {
    from {
        route-filter 0.0.0.0/0 upto /24;
    }
    then {
        local-preference 110;
        forwarding-class best-effort;
        accept;
    }
}
term 3 {
    from {
        route-filter 0.0.0.0/0 exact;
    }
    then {
        local-preference 120;
        accept;
    }
}
term 4 {
    then reject;
}

icepick(a)NCCORE01# show interfaces ge-0/0/1 unit 55
description "Test interface";
vlan-id 55;
family inet {
    filter {
        input 128k;
        output 128k;
    }
    address 113.21.x.x/29;
}

The problem I'm running into is all traffic is being rate-limited at 128k,
rather than just the international. I was able to find one example located
at
http://archives.devshed.com/forums/networking-100/policer-based-on-community...
however this describes the use of destination-class where I only have
forwarding-class so I'm not sure if this has been depreciated or renamed or
not supported by J2320.

I understand this may be a question for JTAC, however I'd like to hear from
users here in NZ that have managed to get this going with junos. To keep
the list sane, please reply offlist, if many people are interested I'll
post the working solution after being tested for archive purposes.

Public holiday for Aucklanders next monday, extra long weekend of beer,
mmmmm

Thanks
Barry

[nznog] Juniper J2320, rate limit based on bgp community (national/international)

Barry Murphy