Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual page 79

Referenced by profile(s):
No profile references
IP Policy plout_ip_1800021
Administrative state: enable
Reference count:
Classifier control list: clout_1800021_01, precedence 100
filter
Referenced by interface(s):
ATM4/0.0 output policy, statistics enabled, virtual-router default
Referenced by profile(s):
No profile references
This example creates an input policy and an output policy, each with multiple rules.
The rules for the two policies are shown in the following list:
Input policy rules
Forward all TCP packets from host 10.2.1.1 to destination 20.0.0.0
0.255.255.255
Filter all TCP packets from host 10.2.1.1 to any destination.
Forward all packets from host 10.2.1.1 to any destination.
Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be
specified in this order:
Ascend-Data-Filter = "01010100 0A020101 14000000 20080600 00000000
00000000"
Ascend-Data-Filter = "01000100 0A020101 00000000 20000600 00000000
00000000"
Ascend-Data-Filter = "01010100 0A020101 00000000 20000000 00000000
00000000"
Ascend-Data-Filter = "01000100 00000000 00000000 00000000 00000000
00000000"
Output policy rules
Forward all TCP packets from 20.0.0.0 0.255.255.255 to host 10.2.1.1.
Filter all TCP packets from any source to host 10.2.1.1.
Forward all packets from any source to host 10.2.1.1.
Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be
specified in this order:
Ascend-Data-Filter = "01010000 14000000 0A020101 08200600 00000000
00000000"
Examples: Using the Ascend-Data-Filter Attribute for IPv4 Subscribers
Chapter 4: Creating Classifier Groups and Policy Rules
1
53