Table of Contents
Advertisement
JUNOSe 11.1.x Policy Management Configuration Guide
Error Conditions for Merged Policies
Most errors, such as mismatched interface types while merging attachments, are
caught during configuration. If merging fails, the attachment at the given interface
is not modified.
You can modify component policies manually. Although you might want to do this
for debugging purposes, we highly discourage you doing this because it can affect
synchronization with the Service Manager application. You cannot manually attach
a final merged policy to any interfaces. Instead, attach the set of component policies
that constitute this merged policy. If you want to modify the final merged policy, use
existing policy merging or component policy modification to achieve this.
Merging Policies Configuration
In the following example IP policy p1 and IP policy p2 are attached at interface
atm5/0.1 as input attachments. Subsequently, policy p3 is attached at the same point.
Then policies p1 and p2 are attached as output at atm 5/0.2.
1.
2.
3.
108
Error Conditions for Merged Policies
The statistics and baseline keywords for the merged policy attachment are
recomputed to be a logical OR of all remaining attachments at the specified
attachment point.
Create IP policy p1.
host1(config)#ip classifier-list C1 tcp host 1.1.1.1 any eq 80
host1(config)#ip classifier-list C2 icmp any any 8 0
host1(config)#ip policy-list p1
host1(config-policy)#classifier-group C1 precedence 90
host1(config-policy-classifier-group)#forward next-hop 10.1.1.1
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group C2 precedence 10
host1(config-policy-classifier-group)#filter
host1(config-policy-classifier-group)#exit
Create IP policy p2.
host1(config)#ip classifier-list C1 tcp host 1.1.1.1 any eq 80
host1(config)#ip classifier-list C3 ip any host 2.2.2.2
host1(config)#ip policy-list p2
host1(config-policy)#classifier-group C1 precedence 90
host1(config-policy-classifier-group)#forward next-hop 20.1.1.1
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group C3 precedence 10
host1(config-policy-classifier-group)#filter
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group * precedence 1000
host1(config-policy-classifier-group)#forward
host1(config-policy-classifier-group)#exit
Attach IP policy p1 as input at interface atm5/0.1.
host1(config)#Interface atm 5/0.1
Advertisement
Table of Contents
