Ip Policy - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - COMMAND REFERENCE A TO M 2010-10-19 Command Reference Manual

JunosE 11.3.x Command Reference Guide A to M

ip policy

Syntax
Release Information
Description
Options
904
For standard policy lists in Interface Configuration mode:
ip policy { input | output | secondary-input } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]
no ip policy { input | output | secondary-input } [ policyName ]
For secure policy lists in Interface Configuration mode:
ip policy { secure-input | secure-output } policyName
[ statistics { enabled [ baseline baselineValue ] [ preserve ] | disabled } ]
no ip policy { secure-input | secure-output }
For policy lists in Profile Configuration mode:
ip policy { input | output | secondary-input } policyName
[ statistics { enabled | disabled } ] [ merge ]
no ip policy { input | output | secondary-input } [ policyName ]
Command introduced before JunosE Release 7.1.0.
merge keyword added in JunosE Release 7.2.0.
Profile Configuration mode added in JunosE Release 7.2.0.
Assigns a policy list to the ingress or egress of an interface.
For standard policy lists, specify the input or output keyword to assign the policy list to
the ingress or egress of the interface. If you enter the ip policy command and the policy
list does not exist, the router inserts a default filter rule. Attaching this policy list to an
interface filters all packets on that interface.
For secure policy lists, which are used for packet mirroring, use the secure-input or
secure-output keyword to assign the packet mirroring policy list to the ingress or egress
side of the interface. If you use the ip policy command and the secure policy list does
not exist, the router creates a secure policy list with a default mirror rule that disables
mirroring. Attaching this policy list to an interface results in no packet mirroring.
In Profile Configuration mode, assigns the policy list to a profile, which then assigns the
policy to an interface.
In Interface Configuration mode, the no version removes the association between a policy
list and an interface. In Profile Configuration mode, the no version removes policy reference
from the profile.
input—Applies policy to data arriving at this interface before a route lookup
output—Applies policy to data leaving this interface
Copyright © 2010, Juniper Networks, Inc.