You can implement policer actions on traffic before the traffic is assigned to ingress queues. To do this, create the desired policers, apply them to a standard firewall filter, and attach the filter as an ingress queuing policing filter [iq-policing-filter filter-name] to an interface at the [edit interfaces interface-name unit logical-unit-number family family] hierarchy level. The iq-policing-filter can only be attached to a static interface.