Creating Policy Lists for IP

The following example creates an IP policy list named routeForABCCorp. For information about creating the CLACLs and rate-limit profile used in this example, see the previous sections.

1. Create the policy list routeForABCCorp.

   host1(config)#ip policy-list routeForABCCorp

   host1(config-policy-list)#

2. Create the classification group for the CLACL named ipCLACL10 and assign the precedence to the classification group.

   host1(config-policy-list)#classifier-group ipCLACL10 precedence 75

   host1(config-policy-list-classifier-group)#

3. Add a rule that specifies a group of forwarding solutions based on classifier list ipCLACL10.

   host1(config-policy-list-classifier-group)#forward next-hop 192.0.2.12 order 10

   host1(config-policy-list-classifier-group)#forward next-hop 192.0.100.109
   order 20

   host1(config-policy-list-classifier-group)#forward next-hop 192.120.17.5 order 30

   host1(config-policy-list-classifier-group)#forward interface ip 3/1 order 40

4. Add a rule that sets a ToS byte value of 125 for packets based on classifier list ipCLACL10.

   host1(config-policy-list-classifier-group)#mark tos 125

5. Add a rule that uses rate-limit profile ipRLP25.

   host1(config-policy-list-classifier-group)#rate-limit-profile ipRLP25

6. Exit Classifier Group Configuration mode for ipCLACL10, then create a new classification group for classifier list ipCLACL20. Add a rule that filters packets based on classifier list ipCLACL20.

   host1(config-policy-list-classifier-group)#exit

   host1(config-policy-list)#classifier-group ipCLACL20 precedence 125

   host1(config-policy-list-classifier-group)#filter

7. Exit Policy List Configuration mode to save the configuration.

   host1(config-policy-list-classifier-group)#exit

   host1(config-policy-list)#exit

   host1(config)#

8. Display the policy list.

   host1#show policy-list routeForABCCorp
   
   

                                     Policy Table
                                     ------ -----
   IP Policy routeForABCCorp
      Administrative state: enable
      Reference count:      0
      Classifier control list: ipCLACL10, precedence 75
         forward
            Virtual-router: default
            List:
              next-hop 192.0.2.12, order 10, rule 2 (active)
              next-hop 192.0.100.109, order 20, rule 3 (reachable)
              next-hop 192.120.17.5, order 30, rule 4 (reachable)
              interface ip3/1, order 40, rule 5
         mark tos 125
         rate-limit-profile ipRLP25
      Classifier control list: ipCLACL20, precedence 125
         filter

Related Topics

• ip policy-list

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.