Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 157

Copyright © 2010, Juniper Networks, Inc.
host1#show parent-group EPG1
Parent Group EPG1
Reference count: 0
Rate limit profile: VLAN_RATE
Create a policy list to attach to user 1.
2.
host1(config)#policy-parameter A hierarchical
host1(config-policy-parameter)#exit
host1(config)#ip policy-list USER_POL1
host1(config-policy-list)#classifier-group * external parent-group EPG1
parameter A
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
Verify the policy list configuration.
host1#show policy-list USER_POL1
IP Policy USER_POL1
Administrative state: enable
Reference count:
Classifier control list: *, precedence 100, external parent-group EPG1
parameter A
forward
Create a policy list to attach to user 2. Also, create a rate limit to police voice traffic
3.
and another rate limit to police all traffic for user 2. Because voice traffic is preferred,
it borrows the tokens unconditionally from all aggregate policers in the hierarchy.
host1(config)#rate-limit-profile VOICE_RATE two-rate hierarchical
host1(config-rate-limit-profile)#committed-rate 64000
host1(config-rate-limit-profile)#committed-action transmit unconditional
host1(config-rate-limit-profile)#exit
host1(config)#rate-limit-profile USER_RATE two-rate hierarchical
host1(config-rate-limit-profile)#committed-rate 300000
host1(config-rate-limit-profile)#committed-action transmit conditional
host1(config-rate-limit-profile)#exit
host1(config)#ip classifier-list VOICE_CLACL udp any any eq 10000
host1(config)#ip policy-list USER_POL2
host1(config-policy-list)#classifier-group VOICE_CLACL parent-group IPG1
host1(config-policy-list-classifier-group)#rate-limit-profile VOICE_RATE
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group * parent-group IPG1
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#parent-group IPG1 external parent-group EPG1
parameter A
host1(config-policy-list-parent-group)#rate-limit-profile USER_RATE
host1(config-policy-list-parent-group)#exit
host1(config-policy-list)#exit
Verify the policy list configuration.
Chapter 7: Creating Hierarchical Policies for Interface Groups
Parent Group Table
------ ----- ------
Policy Table
------ -----
0
133