Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 154

JunosE 11.3.x Policy Management Configuration Guide
130
Configure two external parent groups EPG1 and EPG2. Create policy-parameter C and
1.
two external parent groups: EPG1 and EPG2.
host1(config)#policy-parameter C hierarchical
host1(config-policy-parameter)#exit
host1(config)#parent-group EPG2
host1(config-parent-group)#rate-limit-profile ER2
host1(config-parent-group)#exit
host1(config)#parent-group EPG1
host1(config-parent-group)#next-parent EPG2 parameter C
host1(config-parent-group)#rate-limit-profile ER1
host1(config-parent-group)#exit
EPG1 contains a rate-limit profile ER1 and points to EPG2 as the next parent group in
series. The EPG2 reference is associated with policy parameter C. When you later use
the policy-parameter command in Interface Configuration mode, actual values are
substituted for the names. EPG2 contains a reference to rate-limit-profile ER2.
Configure IP policy list POL.
2.
host1(config)#ip policy-list POL
host1(config-policy-list)#classifier-group C1 external parent-group EPG1 parameter
A
host1(config-policy-list-classifier-group)#rate-limit-profile R1
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group C2 parent-group IPG1
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#parent-group IPG1 external parent-group EPG1 parameter
B
host1(config-parent-group)#rate-limit-profile R2
host1(config-policy-list-parent-group)#exit
A classified flow C1 references EPG1 as the next parent group to call in the hierarchy.
This is an external parent group that is associated with policy parameter A. The C2
classified flow points to internal parent group IPG1, which contains rate-limit-profile
R2 and points to EPG1 as the next parent group to call in the hierarchy. The EPG1
reference is associated with policy parameter B. When you later use the
policy-parameter command in Interface Configuration mode, the policy parameters
are given numeric values.
Attach POL to atm5/0.1 as an input policy.
3.
host1(config)#interface atm 5/0.1
host1(config-interface)#ip policy-parameter hierarchical A 1
host1(config-interface)#ip policy-parameter hierarchical B 1
host1(config-interface)#ip policy-parameter hierarchical C 1
host1(config-interface)#ip policy input POL statistics enabled
host1(config-interface)#exit
Policy list POL contains three parameter names that must be substituted with actual
values. This attachment contains two internal rate-limit instances, one for R1 and one
for R2. This attachment also contains one parent group instance for IPG1, one
parent-group instance for (EPG1, parameter A) tuple, one for (EPG1, parameter B)
tuple, and one for (EPG2, parameter C) tuple. Value number 1 is substituted for
parameters A, B, and C when you use the policy-parameter command. Because of
Copyright © 2010, Juniper Networks, Inc.