Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 73

Copyright © 2010, Juniper Networks, Inc.
Administrative state: enable
Reference count:
Classifier control list: clout_1800021_01, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 output policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
This example creates an input policy and an output policy, each with multiple rules. The
rules for the two policies are shown in the following list:
Input policy rules
Forward all TCP packets from host 10.2.1.1 to destination 20.0.0.0 0.255.255.255
Filter all TCP packets from host 10.2.1.1 to any destination.
Forward all packets from host 10.2.1.1 to any destination.
Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be specified
in this order:
Ascend-Data-Filter = "01010100 0A020101 14000000 20080600 00000000
00000000"
Ascend-Data-Filter = "01000100 0A020101 00000000 20000600 00000000
00000000"
Ascend-Data-Filter = "01010100 0A020101 00000000 20000000 00000000
00000000"
Ascend-Data-Filter = "01000100 00000000 00000000 00000000 00000000
00000000"
Output policy rules
Forward all TCP packets from 20.0.0.0 0.255.255.255 to host 10.2.1.1.
Filter all TCP packets from any source to host 10.2.1.1.
Forward all packets from any source to host 10.2.1.1.
Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be specified
in this order:
Ascend-Data-Filter = "01010000 14000000 0A020101 08200600 00000000
00000000"
Ascend-Data-Filter = "01000000 00000000 0A020101 00200600 00000000
00000000"
Ascend-Data-Filter = "01010000 00000000 0A020101 00200000 00000000
00000000"
Ascend-Data-Filter = "01000000 00000000 00000000 00000000 00000000
00000000"
Chapter 4: Creating Classifier Groups and Policy Rules
1
49