Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 96

JunosE 11.3.x Policy Management Configuration Guide
72
In Interface Configuration mode, you assign a parameter type and value for an interface.
Policy parameters configured in Interface Configuration mode that have interface-type
IP, IPv6, or L2TP specified with the command associate the command with the
respective interface in the stack.
If a parameter is configured in Interface Configuration mode without configuring it in
Global Configuration mode, a global configuration is automatically created for this
parameter with the type specified in interface configuration and a system-specified
default value.
A parameter value specified in Interface Configuration mode overrides the value
specified in Global Configuration mode.
If the parameter is not configured in Interface Configuration mode, the value from the
global configuration is used. If the global value satisfies most of the interfaces, then
you do not have to configure parameters for each interface separately, which reduces
the number of configuration steps you need to take.
When you delete an interface, the interface-specific configuration of the parameter is
deleted. However, the global configuration remains until you delete it whether it was
created explicitly in Global Configuration mode or automatically created in Interface
Configuration mode.
For example, you can configure policy parameter param1 of type reference-rate in
Global Configuration mode with a default value of 100000 and then configure it as
200000 in Interface Configuration mode for inf1. If you configure a policy parameter
as 500000 in Interface Configuration mode for interface inf1, the system automatically
creates parameter param2 with a 64K (65536) global default value. When you delete
interface inf1, the system deletes the interface-specific configuration for param1 and
param2, but the global configuration values of 100000 and 64K (65536) remain until
you explicitly delete them.
You must create policy parameters in either Global Configuration mode or Interface
Configuration mode before they can be used or referenced as policy objects. For
example. before you define a rate in a rate-limit profile in terms of percentage of a
policy parameter param1, you must configure param1 as parameter type reference-rate.
You can configure multiple policy parameters; there are no restrictions on the number
of parameters.
If you modify a policy parameter value in Interface Configuration mode, it affects all
policies attached to that interface. If a parameter value is changed for an interface,
only the input, secondary-input, and output policies attached to that interface are
affected by this change.
If you modify a policy parameter value in Global Configuration mode, it affects all
policies attached to all interfaces that use the global values. For example, if parameter
param1 is used in policies attached to two interfaces, but param1 is only configured for
interface i1, when you modify the default value for param1 in Global Configuration
mode, it affects only the attachment on the second interface i2.
You can specify a rate within a rate-limit profile as a percentage of the parameter and
burst size in milliseconds. You can use this rate-limit profile in a policy. You can assign
values to these parameters for an interface. The actual rate and burst size are calculated
Copyright © 2010, Juniper Networks, Inc.