All things related to multicast

[Pekka Savola <>]

On Wed, 11 Jun 2008, Niels den Otter wrote:
> Pekka Savola wrote:
> > We've for years now installed policers in our upstream/peering
> > interfaces which rate-limit SAP to 1 mbit/s.  That has saved our and our
> > customers' backsides a couple of times already -- without crippling the
> > real use of SAP.
>
> Would you happen to have an example Junos configuration to do this in global 
> configuration?

Add in appropriate input interfaces' input ACLs something like:

        term Multicast_SAP_ratelimit {
            from {
                destination-address {
                    224.2.127.254/32;
                }
            }
            then {
                policer SAP_MULTICAST_POLICER;
                accept;
            }
        }

Which refers to:

firewall {
    policer SAP_MULTICAST_POLICER {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 100k;
        }
        then discard;
    }
}