Adding Objects for Policy Servers to the Directory

To communicate with policy servers, the SAE creates and manages pseudointerfaces that it associates with a policy decision point object in the directory. Each policy server in the SRC network must appear in the directory as a policy decision point object.

Use the following configuration statements to specify the policy server as a policy decision point:

shared network policy-decision-point name {
description description;
pdp-address pdp-address;
pdp-group pdp-group;
}

To add a policy server to the directory with the SRC CLI:

  1. From configuration mode, access the configuration statement that configures the policy decision point.
    user@host# edit shared network policy-decision-point name
  2. (Optional) Specify information about the policy server.
    [edit shared network policy-decision-point name]
    user@host# set description description
  3. (Optional) Specify the IP address of the policy server. The SAE uses this address to establish a COPS connection with the policy server.
    [edit shared network policy-decision-point name]
    user@host# set pdp-address pdp-address
  4. (Optional) Specify the name of the policy server group.
    [edit shared network policy-decision-point name]
    user@host# set pdp-group pdp-group
  5. Create an SAE community for the policy servers. See Specifying Application Managers for the Policy Server .

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.