Hi Amitsaxena
Thank you for your description. Very helpful.....
So would something similar to the following be good (as a starter):
set class-of service classifiers dscp voip import default
set class-of-service classifiers dscp voip forwarding-class assured-forwarding loss-priority low code-points 011010
set class-of-service drop-profiles low_drop fill-level 95 drop-probability 0
set class-of-service drop-profiles low_drop fill-level 100 drop-probability 100
set class-of-service drop-profiles med_drop fill-level 75 drop-probability 0
set class-of-service drop-profiles med_drop fill-level 95 drop-probability 30
set class-of-service drop-profiles high_drop fill-level 50 drop-probability 0
set class-of-service drop-profiles high_drop fill-level 95 drop-probability 50
set class-of-service interfaces xe-1/2/5 scheduler-map normal
set class-of-service scheduler-maps normal forwarding-class expedited-forwarding scheduler ef
set class-of-service scheduler-maps normal forwarding-class assured-forwarding scheduler af
set class-of-service scheduler-maps normal best-effort scheduler be
set class-of-service scheduler-maps normal forwarding-class network-control scheduler nc
[edit class-of-service schedulers ef]
set transmit-rate percent 15
set buffer-size percent 15
set priority high
set drop-profile-map loss-priority high protocol any drop-profile high_drop
set drop-profile-map loss-priority medium-high protocol any drop-profile med_drop
set drop-profile-map loss-priority medium-low protocol any drop-profile med_drop
set drop-profile-map loss-priority low protocol any drop-profile low_drop
[edit class-of-service schedulers nc]
set transmit-rate percent 5
set buffer-size percent 5
set priority medium-high
set drop-profile-map loss-priority high protocol any drop-profile high_drop
set drop-profile-map loss-priority medium-high protocol any drop-profile med_drop
set drop-profile-map loss-priority medium-low protocol any drop-profile med_drop
set drop-profile-map loss-priority low protocol any drop-profile low_drop
[edit class-of-service scheduler be]
set transmit-rate remainder
set buffer-size remainder
set priority low
set drop-profile-map loss-priority high protocol any drop-profile high_drop
set drop-profile-map loss-priority medium-high protocol any drop-profile med_drop
set drop-profile-map loss-priority medium-low protocol any srop-profile med-drop
set drop-profile-map loss-priority low protocol any drop-profile low_drop
[edit class-of-service scheduler af]
set transmit-rate percent 50
set buffer-size percent 50
set priority medium-low
set drop-profile-map loss-priority high protocol any drop-profile high_drop
set drop-profile-map loss-priority medium-high protocol any drop-profile med_drop
set drop-profile-map loss-priority medium-low protocol any drop-profile med_drop
set drop-profile-map loss-priority low protocol any drop-profile low_drop
My questions will be:
1: Interface xe-1/2/5 is the Ingress interface ? What would I place on egress?
2: Is there a way that I can only allow traffic from certain sources and destinations?
Thanks