Policy Commands - Juniper E320 Configuration Manual

JUNOSe 7.2.x Policy Management Configuration Guide

Policy Commands

atm policy
frame-relay policy
gre-tunnel policy
ip policy
ipv6 policy
mpls policy
l2tp policy
vlan policy
64 !
Applying Policy Lists to Interfaces and Profiles
Use the commands described in this section to assign policy lists to interfaces.
! Use to assign an ATM, Frame Relay, GRE tunnel, IP, IPv6, MPLS, or VLAN policy
list to an interface. Also use to specify an IP, IPv6, or L2TP policy list to a profile,
which then assigns the policy to the interfaces to which the profile is attached.
The mpls policy command is used to attach policies to MPLS Layer 2
NOTE:
circuits only.
The SRP module Fast Ethernet port does not support policy attachments,
NOTE:
nor can the module be the destination for the forward next-hop, forward
next-interface, next-hop, and next-interface commands.
! Use the input or output keyword to assign the policy list to the ingress or
egress of the interface.
! For ATM, IP, and IPv6 policy lists, use the secondary-input keyword to assign
the policy list, after route lookup, to data destined for local or remote
destinations.
! For IP and IPv6 policy lists, use the secondary-input keyword to assign the
policy list, after route lookup, to data destined to local or remote destinations.
The router supports secondary input policies whose principal applications are:
! To defeat denial-of-service attacks directed at a router's local IP or IPv6
stack
! To protect a router from being overwhelmed by legitimate local traffic
! To apply policies on packets associated with the route class
The local-input keyword for the ip policy and ipv6 policy commands is
NOTE:
deprecated, and may be completely removed in a future release. We recommend
you remove the keyword should be removed from scripts.
Re-create any local input policies using the ip classifier-list local true command
and attaching the policies using the ip policy secondary-input command.
! You can enable or disable the recording of routing statistics for bytes and
packets affected by the policy.
! If you enable statistics, you can enable or disable baselining of the statistics.
The router implements the baseline by reading and storing the statistics at the
time the baseline is set and then subtracting this baseline whenever
baseline-relative statistics are retrieved.