All things related to multicast

[Chris Spears <>]

Policing SAP at 1m is simplistic enough.  The larger concern was why 
this takes such a toll on the routing-engine, why counters on RE-filters 
didn't increment, etc.

Pekka Savola wrote:
> On Wed, 11 Jun 2008, Niels den Otter wrote:
> > Pekka Savola wrote:
> > > We've for years now installed policers in our upstream/peering
> > > interfaces which rate-limit SAP to 1 mbit/s.  That has saved our and our
> > > customers' backsides a couple of times already -- without crippling the
> > > real use of SAP.
> >
> > Would you happen to have an example Junos configuration to do this in 
> > global configuration?
>
> Add in appropriate input interfaces' input ACLs something like:
>
>         term Multicast_SAP_ratelimit {
>             from {
>                 destination-address {
>                     224.2.127.254/32;
>                 }
>             }
>             then {
>                 policer SAP_MULTICAST_POLICER;
>                 accept;
>             }
>         }
>
> Which refers to:
>
> firewall {
>     policer SAP_MULTICAST_POLICER {
>         if-exceeding {
>             bandwidth-limit 1m;
>             burst-size-limit 100k;
>         }
>         then discard;
>     }
> }