Merging Policies Configuration - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

JunosE 11.3.x Policy Management Configuration Guide

Merging Policies Configuration

104
You can modify component policies manually. Although you might want to do this for
debugging purposes, we highly discourage you doing this because it can affect
synchronization with the Service Manager application. You cannot manually attach a
final merged policy to any interfaces. Instead, attach the set of component policies that
constitute this merged policy. If you want to modify the final merged policy, use existing
policy merging or component policy modification to achieve this.
In the following example IP policy p1 and IP policy p2 are attached at interface atm5/0.1
as input attachments. Subsequently, policy p3 is attached at the same point. Then policies
p1 and p2 are attached as output at atm 5/0.2.
Create IP policy p1.
1.
host1(config)#ip classifier-list C1 tcp host 1.1.1.1 any eq 80
host1(config)#ip classifier-list C2 icmp any any 8 0
host1(config)#ip policy-list p1
host1(config-policy)#classifier-group C1 precedence 90
host1(config-policy-classifier-group)#forward next-hop 10.1.1.1
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group C2 precedence 10
host1(config-policy-classifier-group)#filter
host1(config-policy-classifier-group)#exit
Create IP policy p2.
2.
host1(config)#ip classifier-list C1 tcp host 1.1.1.1 any eq 80
host1(config)#ip classifier-list C3 ip any host 2.2.2.2
host1(config)#ip policy-list p2
host1(config-policy)#classifier-group C1 precedence 90
host1(config-policy-classifier-group)#forward next-hop 20.1.1.1
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group C3 precedence 10
host1(config-policy-classifier-group)#filter
host1(config-policy-classifier-group)#exit
host1(config-policy)#classifier-group * precedence 1000
host1(config-policy-classifier-group)#forward
host1(config-policy-classifier-group)#exit
Attach IP policy p1 as input at interface atm5/0.1.
3.
host1(config)#Interface atm 5/0.1
host1(config-subif)#ip policy input p1 statistics enable merge
host1(config-subif)#exit
Attach IP policy p2 as input at interface atm 5/0.1. A merged policy is created.
4.
host1(config)#Interface atm 5/0.1
host1(config-subif)#ip policy input p2 statistics enable merge
host1(config-subif)#exit
Display the policy lists.
5.
host1#show policy-list
Policy Table
------ -----
Copyright © 2010, Juniper Networks, Inc.