secure ip classifier-list

Syntax

secure ip classifier-list classifierName { { classifier-auth-id { 0 } } | { [ traffic-class trafficClassName ]
[ color { green | yellow | red } ] [ user-packet-class userPacketClassValue ]
[ source-route-class routeClassValue ] [ destination-route-class routeClassValue ]
[ local { true | false } ] [ not ] { protocol }
[ not ] { sourceAddress sourceMask | host sourceHostAddress | any }
[ sourceQualifier ]
[ not ] { destinationAddress destinationMask | host destinationHostAddress | any }
[ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ]
[ ip-frag-offset { eq 0 | eq 1 | gt 1 } ]
[ precedence precNum | dsField dsFieldNum | tos tosNum ] } }

no secure ip classifier-list classifierName [ classifierNumber ] [ classifier-auth-id { 0 } ]

Release Information

Command introduced in JunosE Release 8.0.0.

Description

Creates or modifies a secure classifier control list. Use the not keyword to deny traffic for a specific protocol, source address, or destination address. Use the any keyword to allow traffic to any source or destination address. The no version removes the classifier control list.

Options

Mode

Global Configuration

Related Documentation