Creating Classifier Control List For Only Ip Policy Lists; Setting Up An Ip Classifier Control List To Accept Traffic From All Sources; Classifying Ip Traffic Based On Source And Destination Addresses; Using Ip Classifier Control Lists To Match Route Class Values - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

Related Topics
Creating or Modifying Classifier Control Lists for IP Policy Lists
Tasks to create or modify classifier control lists for IP policy lists:

Creating Classifier Control List for Only IP Policy Lists

You can create or modify a classifier control list that can be used only in IP policy
lists.The behavior of multiple-element classifier-list classification is the logical OR of
the elements in the CLACL.

Setting Up an IP Classifier Control List to Accept Traffic from All Sources

You can set up a CLACL to accept IP traffic from all source addresses on the subnet.

Classifying IP Traffic Based on Source and Destination Addresses

You can classify traffic based on source and destination addresses, You can specify
the address as a host address, or a subnet with a wildcard. If you specify the address
as a subnet, the mask, in binary notation, must be a series of contiguous zeros,
followed by a series of contiguous ones. The any keyword is the address wildcard,
matching traffic for any address.
gre-tunnel classifier-list
Creating Classifier Control List for Only IP Policy Lists on page 11
Setting Up an IP Classifier Control List to Accept Traffic from All
Sources on page 11
Classifying IP Traffic Based on Source and Destination Addresses on page 11
Using IP Classifier Control Lists to Match Route Class Values on page 12
Creating IP Classifier Control Lists for TCP and UDP Ports on page 12
Creating an IP Classifier Control List That Matches the ToS Byte on page 13
Creating an IP Classifier Control List That Filters ICMP Echo Requests on page 13
Creating IP Classifier Control Lists That Use TCP or IP Flags on page 13

Creating IP Classifier Control Lists That Match the IP Fragmentation

Offset on page 13
Issue the ip classifier-list command to match all packets that have a source IP
address of 192.168.30.100 or have a destination IP address of 192.168.30.200:
host1(config)#ip classifier-list boston5 ip host 192.168.30.100 any
host1(config)#ip classifier-list boston5 ip any host 192.168.30.200
Issue the ip classifier-list command:
host1(config)#ip classifier-list XYZCorpPermit ip 192.168.0.0 0.0.255.255 any
Creating or Modifying Classifier Control Lists for IP Policy Lists
Chapter 2: Creating Classifier Control Lists for Policies
11