Configuring Classify-Traffic Conditions (C-Web Interface)

You create classify-traffic conditions in JUNOSe policy rules, in JUNOS ASP and JUNOS filter policy rules, and in PCMM policy rules.

The available configuration statements change depending on the type of policy rule that holds the condition and on the type of protocol that you specify.

To configure a classify-traffic condition, do the following:

1. Create a classify-traffic condition. See:

   See Creating a Classify-Traffic Condition (C-Web Interface).

2. Configure source networks. You can configure source networks in one of two formats. See:
   •  Configuring Source Networks (C-Web Interface)
   •  Configuring Source Grouped Networks (C-Web Interface)
3. Configure destination networks. You can configure destination networks in one of two formats. See:
   •  Configuring Destination Networks (C-Web Interface)
   •  Configuring Destination Grouped Networks (C-Web Interface)
4. Configure protocol conditions. The type of protocol condition that you use depends on your configuration.
   • To configure protocol conditions that do not include ports, see:
     •  Configuring Protocol Conditions (C-Web Interface)
   • To configure protocol conditions that include ports, see:
     •  Configuring Protocol Conditions with Ports (C-Web Interface)
   • To configure protocol conditions in which the protocol that you specify is a parameter, see:
     •  Configuring Protocol Conditions with Parameters (C-Web Interface)
   • To configure protocol conditions in which the protocol is TCP, see:
     •  Configuring TCP Conditions (C-Web Interface)
   • To configure protocol conditions in which the protocol is ICMP, see:
     •  Configuring ICMP Conditions (C-Web Interface)
   • To configure protocol conditions in which the protocol is IGMP, see:
     •  Configuring IGMP Conditions (C-Web Interface)
   • To configure protocol conditions in which the protocol is IPSec, see:
     •  Configuring IPSec Conditions (C-Web Interface)
   • To configure a ToS byte condition, see:
     •  Configuring IGMP Conditions (C-Web Interface)
5. For JUNOS filter policies, configure a JUNOS filter condition. See:
   •  Configuring JUNOS Filter Conditions (C-Web Interface)
6. For the stateful firewall and NAT policies, configure an application protocol condition. See:
   •  Configuring Application Protocol Conditions (C-Web Interface)

     Note: PCMM classifiers support only the following classifiers: Source and destination IP addresses Network protocol Source or destination port Type-of-service (ToS) byte and ToS mask The policy engine ignores all other values.

Copyright © 2008, Juniper Networks, Inc. All Rights Reserved. Trademark Notice.