Juniper srx系列防火墙端口限速

2017/03/31 juniper 共 1738 字,约 5 分钟

端口限速

限制上传速度(应用到内网接口)

set firewall family inet filter upload-limit term 0 from source-address 192.168.0.16/32
set firewall family inet filter upload-limit term 0 then policer upload-1mb
set firewall family inet filter upload-limit term 0 then accept
set firewall family inet filter upload-limit term 1 from source-address 192.168.0.0/24
set firewall family inet filter upload-limit term 1 then policer upload-9mb
set firewall family inet filter upload-limit term 1 then accept
set firewall family inet filter upload-limit term 2 then accept (其它网段不限速)
set firewall policer upload-1mb if-exceeding bandwidth-limit 1m
set firewall policer upload-1mb if-exceeding burst-size-limit 625k
set firewall policer upload-1mb then discard
set firewall policer upload-9mb if-exceeding bandwidth-limit 3m
set firewall policer upload-9mb if-exceeding burst-size-limit 625k
set firewall policer upload-9mb then discard  应用到内网接口

set interfaces vlan unit 100 family inet filter input upload-limit

限制下载速度(应用到内网接口)

set firewall family inet filter download-limit term 0 from destination-address 192.168.0.222/32
set firewall family inet filter download-limit term 0 then policer download-1mb
set firewall family inet filter download-limit term 0 then accept
set firewall family inet filter download-limit term 1 from destination-address 192.168.0.0/24
set firewall family inet filter download-limit term 1 then policer download-9mb
set firewall family inet filter download-limit term 1 then accept
set firewall family inet filter download-limit term 2 then accept (其它网段不限速)
set firewall policer download-1mb if-exceeding bandwidth-limit 1m
set firewall policer download-1mb if-exceeding burst-size-limit 625k
set firewall policer download-1mb then discard
set firewall policer download-9mb if-exceeding bandwidth-limit 3m
set firewall policer download-9mb if-exceeding burst-size-limit 625k
set firewall policer download-9mb then discard  应用到内网接口

set interfaces vlan unit 100 family inet filter output download-limit

Search

    Table of Contents