Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 12

JunosE 11.3.x Policy Management Configuration Guide
Chapter 8
Chapter 9
xii
Hierarchical Aggregation Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
RADIUS and Profile Configuration for Hierarchical Policies . . . . . . . . . . . . . . . . . . 127
Applying a Profile to Interfaces with Service Manager . . . . . . . . . . . . . . . . . . . . . . 127
Hierarchical Policy Configuration Considerations . . . . . . . . . . . . . . . . . . . . . . . . . 127
Example: Hierarchical Policy Quick Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 128
Example: Configuring Hierarchical Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Example: VLAN Rate Limit Hierarchical Policy for Interface Groups
Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Example: Wholesale L2TP Model Hierarchical Policy Configuration . . . . . . . . . . 135
Example: Aggregate Rate Limit for All Nonvoice Traffic Hierarchical Policy
Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Example: Arbitrary Interface Groups Hierarchical Policy Configuration . . . . . . . . 140
Example: Service and User Rate-Limit Hierarchy Overlap Hierarchical Policy
Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Example: Percentage-Based Hierarchical Rate-Limit Profile for External Parent
Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Example: PPP Interfaces Hierarchical Policy Configuration . . . . . . . . . . . . . . . . . 147
Policy Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Policy Resources Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
FPGA Hardware Classifiers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
CAM Hardware Classifiers Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
Size Limit for IP and IPv6 CAM Hardware Classifiers . . . . . . . . . . . . . . . . . . . . . . 155
IP Classifiers and Size Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
IPv6 Classifiers and Size Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Creating and Attaching a Policy with IP Classifiers . . . . . . . . . . . . . . . . . . . . . . . . 160
Variable-Sized CAM Classification for IPv6 Policies Examples . . . . . . . . . . . . . . . 162
144-bit IPv6 Classification Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
288-bit IPv6 Classification Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
576-bit IPv6 Classification Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Performance Impact and Scalability Considerations . . . . . . . . . . . . . . . . . . . . . . 166
Performance Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Scalability Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
CAM Device Block Size and CAM Entry Allocation . . . . . . . . . . . . . . . . . 167
Number of CAM Entries Per Allocation and Free Entries . . . . . . . . . . . . 167
Software Classifiers Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
Interface Attachment Resources Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
CAM Hardware Classifiers and Interface Attachment Resources . . . . . . . . . . . . . 171
Range Vector Hardware Classifiers and Interface Attachment Resources . . . . . . 171
Monitoring Policy Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Monitoring Policy Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Setting a Statistics Baseline for Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Monitoring the Policy Configuration of ATM Subinterfaces . . . . . . . . . . . . . . . . . . 175
Monitoring Classifier Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
Monitoring Color-Mark Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Monitoring Control Plane Policer Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Monitoring the Policy Configuration of Frame Relay Subinterfaces . . . . . . . . . . . 180
Monitoring GRE Tunnel Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Monitoring Interfaces and Policy Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Copyright © 2010, Juniper Networks, Inc.