Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 72

JunosE 11.3.x Policy Management Configuration Guide
48
host1#show classifier-list
IP clin_1800020_00.1 ip 10.2.1.0 0.0.0.255 any
host1#show policy-list
IP Policy plin_ip_1800020
Administrative state: enable
Reference count:
Classifier control list: clin_1800020_00, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 input policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
In this example, the Ascend-Data-Filter attribute is used to create RADIUS records that
configure two policies. The first policy is an input policy that filters all TCP packets that
come from a port greater than 9000 on host 10.2.1.1 and that go to any destination. The
second policy is an output policy that filters all UDP packets from network 20.1.0.0 to
host 10.2.1.1, port 3090.
Ascend-Data-Filter = "01000100 0A020101 00000000 20000600 23280000
03000000"
Ascend-Data-Filter = "01000000 14010000 0A020101 10201100 00000C12 00020000"
Using the show classifier-list and show policy-list commands produces the following
information about the new policies:
host1#show classifier-list
IP clin_1800021_00.1 tcp 10.2.1.1 gt 9000 any
IP clout_1800021_01.1 udp 20.1.0.0 0.0.255.255 10.2.1.1 eq 3090
host1#show policy-list
IP Policy plin_ip_1800021
Administrative state: enable
Reference count:
Classifier control list: clin_1800021_00, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 input policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
IP Policy plout_ip_1800021
Classifier Control List Table
---------- ------- ---- -----
Policy Table
------ -----
1
Classifier Control List Table
---------- ------- ---- -----
Policy Table
------ -----
1
Copyright © 2010, Juniper Networks, Inc.