Creating A Classifier Group For A Policy List - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

JunosE 11.3.x Policy Management Configuration Guide

Creating a Classifier Group for a Policy List

38
NOTE: You can use the suspend version of the command to suspend an
individual entry in a group of forwarding solutions. The forward rule remains
active as long as there is a reachable or active entry in the group of forwarding
solutions. If you suspend all entries in the group, the status of the forward
rule is changed to suspended.
To create a classifier group for a policy list and assigns precedence to the specific CLACL
that is referenced in the group:
Create a classifier group.
1.
host1(config-policy-list)#classifier-group C1 parent-group IPG1
Assign a precedence to the CLACL.
2.
host1(config-policy-list)#classifier-group westfordClacl precedence 150
Create a hierarchical policy parameter list.
3.
host1(config)#policy-parameter A hierarchical
host1(config)#parent-group EPG1
host1(config-parent-group)#exit
host1(config)#ip policy-list POL
host1(config-policy-list)#classifier-group C1 external parent-group EPG1 parameter
A
host1(config-policy-list)#exit
The no version removes the classifier group and its rules from a policy list. The
precedence keyword specifies the order in which a classifier group is evaluated
compared to other classifier groups. Classifier groups are evaluated from lowest to
highest precedence value (for example, a classifier group with a precedence of 1 is
used before a classifier group with a precedence of 2). Classifier groups with equal
precedence are evaluated in the order of creation, with the group created first having
precedence. A default value of 100 is used if no precedence is specified.
The parent-group keyword creates a parent group in a rate-limit hierarchy for IP, IPv6,
L2TP, and MPLS. The external parent-group keyword creates an external parent
group in a rate-limit hierarchy for IP, IPv6, L2TP, and MPLS. All packets matching the
classifier are sent to the parent group for further processing, except for packets dropped
by the classifier using the filter rule.
More than one classifier group can have the same parent group, which enables you
to create hierarchies.
NOTE: Empty classifier groups have no effect on the router's classification
of packets and are ignored by the router. You might inadvertently create
empty classifier groups in a policy if you use both the newer CLI style and
the older CLI style, which used the Policy List Configuration mode version
of the classifier list commands.
Copyright © 2010, Juniper Networks, Inc.