Examples: Using The Ascend-Data-Filter Attribute For Ipv6 Subscribers; Table 8: Ascend-Data-Filter Attribute For An Output Policy On An Ipv6 - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

JunosE 11.3.x Policy Management Configuration Guide
Related
Documentation

Examples: Using the Ascend-Data-Filter Attribute for IPv6 Subscribers

Table 8: Ascend-Data-Filter Attribute for an Output Policy on an IPv6 Interface
Action or Classifier
Type
Forward
Indirection
52
IP clin_1800023_00.1 tcp host 10.2.1.2
host1#show policy-list
IP Policy plin_ip_1800023
Administrative state: enable
Reference count:
Classifier control list: clin_1800023_00, precedence 100
mark 5 mask 170
traffic-class someTcl
rate-limit-profile someRlp
Referenced by interface(s):
ATM11/0.0 input policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
Examples: Using the Ascend-Data-Filter Attribute for IPv6 Subscribers on page 52
Using RADIUS to Create and Apply Policies Overview on page 42
This section provides examples showing the configuration of policies that use the
Ascend-Data-Filter attribute when there are IPv6 subscribers in a network.
In this example, the following two Ascend-Data-Filter attributes are used to create
RADIUS records that configure two policies. The first policy is an output policy that filters
all UDP packets from network 2001:82ab:1020:87ec::0/64 to host
2001:82ab:1020:87ec:1234:0917:3415:0012, port 3090. The second policy is an input
policy that filters all TCP packets that come from a port greater than 9000 on host
2001:82ab:1020:87ec:1234:0917:3415:0012 and that go to any destination.
Ascend-Data-Filter1 = "03000000 300182ab 102087ec 00000000 00000000
200182ab 102087ec 12340917 34150012 40801100 00000C12 00020000"
Ascend-Data-Filter2 = "03000100 200182ab 102087ec 12340917 34150012 00000000
00000000 00000000 00000000 80000600 23280000 03000000"
Table 8 on page 52 lists the values specified in the Ascend-Data-Filter1 attribute that
are used to create an output policy.
Hex Value
03
00
00
---------- ------- ---- -----
Policy Table
------ -----
1
Actual Value
IPv6
Filter
Egress
Copyright © 2010, Juniper Networks, Inc.