Table of Contents
Advertisement
JUNOSe 11.1.x Policy Management Configuration Guide
NOTE: You can use the suspend version of the command to suspend an individual
entry in a group of forwarding solutions. The forward rule remains active as long as
there is a reachable or active entry in the group of forwarding solutions. If you suspend
all entries in the group, the status of the forward rule is changed to suspended.
Creating a Classifier Group for a Policy List
To create a classifier group for a policy list and assigns precedence to the specific
CLACL that is referenced in the group:
1.
2.
3.
42
Creating a Classifier Group for a Policy List
host1(config-policy-list)#classifier-group westfordClacl precedence 200
host1(config-policy-list-classifier-group)#forward interface atm 0/0.1 order 10
host1(config-policy-list-classifier-group)#forward interface atm 12/0.1 order 50
host1(config-policy-list-classifier-group)#forward interface atm 3/0.25 order 300
Create a classifier group.
host1(config-policy-list)#classifier-group C1 parent-group IPG1
Assign a precedence to the CLACL.
host1(config-policy-list)#classifier-group westfordClacl precedence 150
Create a hierarchical policy parameter list.
host1(config)#policy-parameter A hierarchical
host1(config)#parent-group EPG1
host1(config-parent-group)#exit
host1(config)#ip policy-list POL
host1(config-policy-list)#classifier-group C1 external parent-group EPG1 parameter
A
host1(config-policy-list)#exit
The no version removes the classifier group and its rules from a policy list. The
precedence keyword specifies the order in which a classifier group is evaluated
compared to other classifier groups. Classifier groups are evaluated from lowest
to highest precedence value (for example, a classifier group with a precedence
of 1 is used before a classifier group with a precedence of 2). Classifier groups
with equal precedence are evaluated in the order of creation, with the group
created first having precedence. A default value of 100 is used if no precedence
is specified.
The parent-group keyword creates a parent group in a rate-limit hierarchy for
IP, IPv6, L2TP, and MPLS. The external parent-group keyword creates an
external parent group in a rate-limit hierarchy for IP, IPv6, L2TP, and MPLS. All
packets matching the classifier are sent to the parent group for further processing,
except for packets dropped by the classifier using the filter rule.
More than one classifier group can have the same parent group, which enables
you to create hierarchies.
Advertisement
Table of Contents
