Hi!
For your queries
1: Interface xe-1/2/5 is the Ingress interface ? What would I place on egress?
- You apply classifier on the ingress interface (not the scheduler, because on ingress interface we want to clasisfy the traffic). And on egress interface you will apply the scheduler-map, so that the egress traffic is processed the way they are configured via scheduler.
[edit class-of-service interfaces xe-1/2/5]
labroot# set unit 0 classifiers dscp voip
[edit class-of-service interfaces xe-1/2/5]
labroot# show
unit 0 {
classifiers {
dscp voip;
}
}
2: Is there a way that I can only allow traffic from certain sources and destinations?
- Yes you can allow certain traffic, for this you will need to use the firewal-filter on the ingress interface. Match the conditions you need and assign to the forwarding-class, This filter will be applied as input direction on the ingress interface. Below is an example.
[edit firewall family inet filter classify]
labroot# show
term 1 {
from {
source-address {
12.12.12.0/24;
}
destination-address {
14.14.14.0/24;
}
}
then {
forwarding-class assured-forwarding;
accept;
}
}
term 2 {
then accept;
}
[edit firewall family inet filter classify]
labroot# top edit interfaces xe-1/2/5 unit 0
[edit interfaces xe-1/2/5 unit 0]
labroot# set family inet filter input classify
[edit interfaces xe-1/2/5 unit 0]
labroot# show
family inet {
filter {
input classify;
}
}