A policer cannot be attached to an IRB interface on an ACX7024.  The policer is configured as follows:

lab@ACX7024-01# show firewall policer POLICER-10M

if-exceeding {

bandwidth-limit 10m;

burst-size-limit 125k;

}

then discard;

{edit]

 

Attempts to attach the policer to an IRB interface will fail with the following error:

lab@ACX7024-01# set interfaces irb unit 100 family inet policer arp POLICER-10M

[edit]

lab@ACX7024-01# commit check

[edit]

'interfaces'

policer cannot be attached to irb interface

error: configuration check-out failed: (validation hook evaluation failed)

Policer defined under Firewall
Attempt to attach it to an IRB interface
Commit Fails

Support will be added in 24.1R1-EVO for the default ARP policer and any non-default policers on IFL, AE, and IRB interfaces.