Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 74

JunosE 11.3.x Policy Management Configuration Guide
50
Using the show classifier-list and show policy-list commands produces the following
information about the new policies:
host1#show classifier-list
IP clin_1800022_00.1 tcp host 10.2.1.1 20.0.0.0 0.255.255.255
IP clin_1800022_01.1 tcp host 10.2.1.1 any
IP clin_1800022_02.1 ip host 10.2.1.1 any
IP clout_1800022_04.1 tcp 20.0.0.0 0.255.255.255 host 10.2.1.1
IP clout_1800022_05.1 tcp any host 10.2.1.1
IP clout_1800022_06.1 ip any host 10.2.1.1
host1#show policy-list
IP Policy plin_ip_1800022
Administrative state: enable
Reference count:
Classifier control list: clin_1800022_00, precedence 100
forward
Classifier control list: clin_1800022_01, precedence 100
filter
Classifier control list: clin_1800022_02, precedence 100
forward
Classifier control list: *, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 input policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
IP Policy plout_ip_1800022
Administrative state: enable
Reference count:
Classifier control list: clout_1800022_04, precedence 100
forward
Classifier control list: clout_1800022_05, precedence 100
filter
Classifier control list: clout_1800022_06, precedence 100
forward
Classifier control list: *, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 output policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile reference
In this example, the following Ascend-Data-Filter attribute creates a RADIUS record that
configures an input policy on an IPv4 interface. The policy filters TCP packets from host
address 10.2.1.2 to any destination. The policy marks the packets with a ToS byte of 5
and a mask of 170. The policy also applies a traffic class named someTcl and a rate-limit
profile named someRlp.
Classifier Control List Table
---------- ------- ---- -----
Policy Table
------ -----
1
1
Copyright © 2010, Juniper Networks, Inc.