ip policy

Syntax

For standard policy lists in Interface Configuration mode:

ip policy { input | output | secondary-input } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]

no ip policy { input | output | secondary-input } [ policyName ]

For secure policy lists in Interface Configuration mode:

ip policy { secure-input | secure-output } policyName
[ statistics { enabled [ baseline baselineValue ] [ preserve ] | disabled } ]

no ip policy { secure-input | secure-output }

For policy lists in Profile Configuration mode:

ip policy { input | output | secondary-input } policyName
[ statistics { enabled | disabled } ] [ merge ]

no ip policy { input | output | secondary-input } [ policyName ]

Release Information

Command introduced before JunosE Release 7.1.0.
merge keyword added in JunosE Release 7.2.0.
Profile Configuration mode added in JunosE Release 7.2.0.

Description

Assigns a policy list to the ingress or egress of an interface.

For standard policy lists, specify the input or output keyword to assign the policy list to the ingress or egress of the interface. If you enter the ip policy command and the policy list does not exist, the router inserts a default filter rule. Attaching this policy list to an interface filters all packets on that interface.

For secure policy lists, which are used for packet mirroring, use the secure-input or secure-output keyword to assign the packet mirroring policy list to the ingress or egress side of the interface. If you use the ip policy command and the secure policy list does not exist, the router creates a secure policy list with a default mirror rule that disables mirroring. Attaching this policy list to an interface results in no packet mirroring.

In Profile Configuration mode, assigns the policy list to a profile, which then assigns the policy to an interface.

In Interface Configuration mode, the no version removes the association between a policy list and an interface. In Profile Configuration mode, the no version removes policy reference from the profile.

Options

Mode

Interface Configuration, Profile Configuration

Related Documentation