Table 23: Classification Fields For Example 1 - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Copyright © 2010, Juniper Networks, Inc.

Table 23: Classification Fields for Example 1

Classifiers
Source address
Destination address
Destination port, ICMP type, ICMP code
Protocol
Color and TCP flags
TOS
IP flags
The total value of the classifiers requested in the ipPol policy is 112, which is less than
128 bit CAM entry size limit.
In this example, a policy with a combination of IP classifiers is created and attached. The
configuration exceeds the 128 bit limit.
Match all TCP packets from 1.1.1.1 port 10 to 2.2.2.2 port 20.
1.
host1(config)#ip classifier-list tcpCLACL tcp host 1.1.1.1 eq 10 host 2.2.2.2 eq 20
Match all IP fragmentation offset equal to 1.
2.
host1(config)#ip classifier-list ipFragCLACL ip any any ip-frag-offset eq 1
Match all frames with the color red.
3.
host1(config)#ip classifier-list colorCLACL color red traffic-class best-effort ip any
any
Match all frames with UPC 1.
4.
host1(config)#ip classifier-group upcCLACL user-packet-class 1 ip any any
Create a policy list.
5.
host1(config)#ip policy-list ipPol
host1(config-policy-list)#classifier-group colorCLACL
host1(config-policy-list-classifier-group)#filter
host1(config-policy-list-classifier-group)#classifier-group ipFragCLACL
host1(config-policy-list-classifier-group)#filter
host1(config-policy-list-classifier-group)#classifier-group igmpCLACL
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#classifier-group lowDelayCLACL
host1(config-policy-list-classifier-group)#traffic-class strict-priority
host1(config-policy-list-classifier-group)#classifier-group tcpCLACL
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#classifier-group *
host1(config-policy-list-classifier-group)#filter
Chapter 8: Policy Resources
Size (Bits)
32
32
16
8
8
8
8
161