JUNOSe 9.1.x Policy Management Configuration Guide > Creating Classifier Groups and Policy Rules > Creating a Classifier Group for a Policy List

Creating a Classifier Group for a Policy List

To create a classifier group for a policy list and assigns precedence to the specific CLACL that is referenced in the group:

1. Create a classifier group.

host1(config-policy-list)#classifier-group C1 parent-group IPG1

2. Assign a precedence to the CLACL.

host1(config-policy-list)#classifier-group westfordClacl precedence 150

3. Create a hierarchical policy parameter list.

host1(config)#policy-parameter A hierarchical

host1(config)#parent-group EPG1

host1(config-parent-group)#exit

host1(config)#ip policy-list POL

host1(config-policy-list)#classifier-group C1 external parent-group EPG1 
parameter A

host1(config-policy-list)#exit

The no version removes the classifier group and its rules from a policy list. The precedence keyword specifies the order in which a classifier group is evaluated compared to other classifier groups. Classifier groups are evaluated from lowest to highest precedence value (for example, a classifier group with a precedence of 1 is used before a classifier group with a precedence of 2). Classifier groups with equal precedence are evaluated in the order of creation, with the group created first having precedence. A default value of 100 is used if no precedence is specified.

The parent-group keyword creates a parent group in a rate-limit hierarchy for IP, IPv6, L2TP, and MPLS. The external parent-group keyword creates an external parent group in a rate-limit hierarchy for IP, IPv6, L2TP, and MPLS. All packets matching the classifier are sent to the parent group for further processing, except for packets dropped by the classifier using the filter rule.

More than one classifier group can have the same parent group, which enables you to create hierarchies.

NOTE: Empty classifier groups have no effect on the router's classification of packets and are ignored by the router. You might inadvertently create empty classifier groups in a policy if you use both the newer CLI style and the older CLI style, which used the Policy List Configuration mode version of the classifier list commands.

Related Topics

• Classifier Groups and Policy Rules Overview
• Chapter 5, Creating Rate-Limit Profiles for examples of using this command to rate limit traffic flows
• Chapter 9, Monitoring Policy Management
• aggregation-node command
• classifier-group command
• ip policy-parameter hierarchical command
• ip policy-parameter reference-rate command
• ipv6 policy-parameter hierarchical command
• ipv6 policy-parameter reference-rate command
• l2tp policy-parameter hierarchical command
• l2tp policy-parameter reference-rate command
• mpls policy-parameter hierarchical command
• mpls policy-parameter reference-rate command
• next-parent command
• parent-group command
• policy-parameter hierarchical command