Ip Policy - Juniper JUNOSE 11.1.X - COMMAND REFERENCE A TO M 4-9-2010 Command Reference Manual

JUNOSe 11.1.x Command Reference Guide A to M

ip policy

For standard policy lists in Interface Configuration mode:
Syntax
ip policy { input | output | secondary-input } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]
no ip policy { input | output | secondary-input } [ policyName ]
For secure policy lists in Interface Configuration mode:
ip policy { secure-input | secure-output } policyName
[ statistics { enabled [ baseline baselineValue ] [ preserve ] | disabled } ]
no ip policy { secure-input | secure-output }
For policy lists in Profile Configuration mode:
ip policy { input | output | secondary-input } policyName
[ statistics { enabled | disabled } ] [ merge ]
no ip policy { input | output | secondary-input } [ policyName ]
Command introduced before JUNOSe Release 7.1.0.
Release Information
merge keyword added in JUNOSe Release 7.2.0.
Profile Configuration mode added in JUNOSe Release 7.2.0.
Assigns a policy list to the ingress or egress of an interface.
Description
For standard policy lists, specify the input or output keyword to assign the policy
list to the ingress or egress of the interface. If you enter the ip policy command and
the policy list does not exist, the router inserts a default filter rule. Attaching this
policy list to an interface filters all packets on that interface.
For secure policy lists, which are used for packet mirroring, use the secure-input or
secure-output keyword to assign the packet mirroring policy list to the ingress or
egress side of the interface. If you use the ip policy command and the secure policy
list does not exist, the router creates a secure policy list with a default mirror rule
that disables mirroring. Attaching this policy list to an interface results in no packet
mirroring.
In Profile Configuration mode, assigns the policy list to a profile, which then assigns
the policy to an interface.
In Interface Configuration mode, the no version removes the association between a
policy list and an interface. In Profile Configuration mode, the no version removes
policy reference from the profile.
910
ip policy