Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual page 162

JUNOSe 11.1.x Policy Management Configuration Guide
1.
2.
3.
136
Example: Configuring Hierarchical Policies
Configure two external parent groups EPG1 and EPG2. Create policy-parameter
C and two external parent groups: EPG1 and EPG2.
host1(config)#policy-parameter C hierarchical
host1(config-policy-parameter)#exit
host1(config)#parent-group EPG2
host1(config-parent-group)#rate-limit-profile ER2
host1(config-parent-group)#exit
host1(config)#parent-group EPG1
host1(config-parent-group)#next-parent EPG2 parameter C
host1(config-parent-group)#rate-limit-profile ER1
host1(config-parent-group)#exit
EPG1 contains a rate-limit profile ER1 and points to EPG2 as the next parent
group in series. The EPG2 reference is associated with policy parameter C. When
you later use the policy-parameter command in Interface Configuration mode,
actual values are substituted for the names. EPG2 contains a reference to
rate-limit-profile ER2.
Configure IP policy list POL.
host1(config)#ip policy-list POL
host1(config-policy-list)#classifier-group C1 external parent-group EPG1
parameter A
host1(config-policy-list-classifier-group)#rate-limit-profile R1
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group C2 parent-group IPG1
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#parent-group IPG1 external parent-group EPG1 parameter
B
host1(config-parent-group)#rate-limit-profile R2
host1(config-policy-list-parent-group)#exit
A classified flow C1 references EPG1 as the next parent group to call in the
hierarchy. This is an external parent group that is associated with policy
parameter A. The C2 classified flow points to internal parent group IPG1, which
contains rate-limit-profile R2 and points to EPG1 as the next parent group to call
in the hierarchy. The EPG1 reference is associated with policy parameter B.
When you later use the policy-parameter command in Interface Configuration
mode, the policy parameters are given numeric values.
Attach POL to atm5/0.1 as an input policy.
host1(config)#interface atm 5/0.1
host1(config-interface)#ip policy-parameter hierarchical A 1
host1(config-interface)#ip policy-parameter hierarchical B 1
host1(config-interface)#ip policy-parameter hierarchical C 1
host1(config-interface)#ip policy input POL statistics enabled
host1(config-interface)#exit
Policy list POL contains three parameter names that must be substituted with
actual values. This attachment contains two internal rate-limit instances, one for
R1 and one for R2. This attachment also contains one parent group instance for
IPG1, one parent-group instance for (EPG1, parameter A) tuple, one for (EPG1,
parameter B) tuple, and one for (EPG2, parameter C) tuple. Value number 1 is