Creating And Attaching A Policy With Ip Classifiers - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

JUNOSe 11.1.x Policy Management Configuration Guide
Table 22: Size Limit of Combined IPv6 Classifiers (continued)

Creating and Attaching a Policy with IP Classifiers

In this example, a policy with a combination of IP classifiers is created and attached.
The configuration conforms to the 128 bit limit.
1.
2.
3.
4.
5.
168
Creating and Attaching a Policy with IP Classifiers
IPv6 Classifier Entry Combination
Protocol
Source address (first word)
Source address (second word)
Source address (third word)
Source address (fourth word)
Source address route class
[ source port ] and
[ [ ICMPv6 type ] | [ ICMPv6 code ]
]
TC field
[ User packet class ] | [ traffic class
] | [ local ]
Match all TCP SYN packets from 1.1.1.1 to any DA with port 2000.
host1(config)#ip classifier-list tcpCLACL tcp host 1.1.1.1 any eq 2000 tcp-flags
"SYN"
Match all IP packets with the don't fragment flag set to host 2.2.2.2.
host1(config)#ip classifier-list ipCLACL ip any host 2.2.2.2 ip-flags
"dont-fragment"
Match all ICMP echo packets.
host1(config)#ip classifier-list icmpCLACL icmp any any 8 0
Match all frames with the color red.
host1(config)#ip classifier-list colorCLACL color red ip any any
Create a policy list.
host1(config)#ip policy-list ipPol
host1(config-policy-list)#classifier-group colorCLACL
Size
Limit
(Bits) Rule
8 –
32 –
32 –
32 –
32 –
8 –
16 When you specify the source port classifier, 16
bits are added to the total classifier entry size.
If you also specify the ICMPv6 type and ICMPv6
code classifiers, no additional bits are added.
8 –
8 When you specify one or more of the user
packet class, traffic class, and local classifiers,
8 bits are added to the total classifier entry size.