Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 158

JunosE 11.3.x Policy Management Configuration Guide
134
host1#show policy-list USER_POL1
IP Policy USER_POL2
Administrative state: enable
Reference count:
Classifier control list: VOICE_CLACL, precedence 100, parent-group IPG1
rate-limit-profile VOICE_RATE
Classifier control list: *, precedence 100, parent-group IPG1
forward
Parent group: IPG1, external parent-group EPG1 parameter A
rate-limit-profile USER_RATE
Create a policy list to attach to user 3 and mark Dsfield=4 traffic with a special traffic
4.
class.
host1(config)#ip classifier-list DSFIELD4_CLACL ip any any dsfield 4
host1(config)#ip policy-list USER_POL3
host1(config-policy-list)#classifier-group DSFIELD4_CLACL external parent-group
EPG1 parameter A
host1(config-policy-list-classifier-group)#traffic-class LOW_DROP
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group * external parent-group EPG1
parameter A
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
The policies created earlier are attached statically to the user's corresponding entry
interface in the E Series router. In this case, fast3/0.1 connects to user 1, fast3/0.2
connects to user 2, and fast3/0.3 connects to user 3.
Create the major interface.
5.
host1(config)#interface fastEthernet 3/0
host1(config-interface)#encapsulation vlan
host1(config-interface)#exit
Create an interface for user 1, attach USER_POL1, and map parameter A to the VLAN
6.
interface stacked below the shared IP interface.
host1(config)#interface fastEthernet 3/0.1
host1(config-interface)#vlan id 1
host1(config-interface)#exit
host1(config)#interface ip 3/0.1.1
host1(config-interface)#ip policy-parameter hierarchical A vlan
host1(config-interface)#ip policy input USER_POL1 statistics enabled
host1(config-interface)#exit
Create the interface for user 2, attach USER_POL2, and map parameter A to the VLAN
7.
interface.
host1(config)#interface ip 3/0.1.2
host1(config-interface)#ip policy-parameter hierarchical A vlan
host1(config-interface)#ip policy input USER_POL2 statistics enabled
host1(config-interface)#exit
Policy Table
------ -----
0
Copyright © 2010, Juniper Networks, Inc.