Dynamic Profile Configuration and UID Substitution Comparison for Parameterized Filters
Table 1 compares Sample Dynamic-Profile Configuration for Parameterized Filters and Dynamic Profile After UID Substitutions for Parameterized Filters when the following service is activated.
my-svc-prof(my-filt-1gw, 207.17.137.239/32, 0, 5m)
Table 1: Dynamic Profiles and UID Substitution Comparison
Dynamic Profile Configuration | Result After Substitution | Comment |
|---|---|---|
dynamic-profile { | dynamic-profile { | - |
[my-svc-prof] { | [my-svc-prof] { | - |
variable { | - | Define the variables. |
[my-in-filter] { | - | - |
mandatory; | - | - |
uid-reference; | - | Assign the name of a UID variable to my-in-filter.. |
} | - | - |
gw1 { | - | - |
mandatory; | - | - |
} | - | - |
gw2 { | - | - |
mandatory; | - | - |
} | - | - |
bw { | - | - |
mandatory; | - | - |
} | - | - |
[my-filt-1gw] { | - | - |
uid; | - | Type is a UID. |
} | - | - |
[my-filt-2gw] { | - | - |
uid; | - | Type is a UID. |
} | - | - |
[my-policer] { | - | - |
uid; | - | Type is a UID. |
} | - | - |
} | - | - |
- | - | |
interfaces { | interfaces { | - |
[$junos-interface-ifd-name] { | ge-1/0/0 { | - |
unit [$junos-underlying-interface-unit] { | unit 7 { | - |
family inet { | family inet { | - |
filter { | filter { | - |
input [$my-in-filter]; | input my-filt-1gw_UID1022; | Substitute the value of my-filt-1gw for my-in-filter, but because my-filt-1gw is a UID reference, substitute the value of $my-filt-1gw: my-filt-1gw_UID1022. |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
- | ||
firewall { | firewall { | - |
policer [$my-policer] { | policer my-policer_UID1005 { | Substitute UID name. |
if-exceeding { | if-exceeding { | - |
bandwidth-limit $bw; | bandwidth-limit 5m; | - |
burst-size-limit 15000; | burst-size-limit 15000; | - |
} | } | - |
then discard; | then discard; | - |
} | } | - |
family inet { | family inet { | - |
filter [$my-filt-1gw] { | filter my-filt-1gw_UID1022 { | Substitute UID name |
interface-specific; | interface-specific; | - |
term t0 { | term t0 { | - |
from { | from { | - |
destination-address $gw1; | destination-address 207.17.137.239/32; | Substitute $gw1 value. |
} | } | - |
then { | then { | - |
policer [$my-policer]; | policer my-policer_UID1005; | Substitute UID name. |
} | } | - |
} | } | - |
term last { | term last { | - |
then { | then { | - |
count drops; | count drops; | - |
discard; | discard; | - |
} | } | - |
} | } | - |
} | } | - |
filter [$my-file-2gw] { | filter my-filt-2gw_UID1018 { | Substitute UID name |
interface-specific; | interface-specific; | - |
term t0 { | term t0 { | - |
from { | from { | - |
destination-address { | destination-address { | - |
$gw1; | 207.17.137.239/32; | Substitute $gw1 value |
$gw2; | 0; | Substitute $gw2 value |
} | } | - |
} | } | - |
then { | then { | - |
policer [$my-policer]; | policer my-policer_UID1005; | Substitute UID name |
} | } | - |
} | } | - |
term last { | term last { | - |
then { | then { | - |
count drops; | count drops; | - |
discard; | discard; | - |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
} | } | - |
