Configuring JUNOSe Parent-Group References (SRC CLI)
For JUNOSe policies, you can apply filter conditions to the input (ingress) and output (egress) side of the router interface. Typically, you use filter conditions with hierarchical rate-limit actions.
Use the following configuration statements to configure match conditions for a JUNOSe filter
- policies group name list name rule name traffic-condition name traffic-match-condition
{
- parent-group parent-group
- source-class source-class ;
- destination-class destination-class ;
- traffic-class traffic-class;
- color color;
- user-packet-class user-packet-class;
- destination-local-interface destination-local-interface ;
- }
To add JUNOSe filter conditions to a classify-traffic condition:
- From configuration mode, create a classify-traffic condition.
For example, to create a traffic-condition called tcpg within policy
rule pr:
- [edit]
- user@host# edit policies group junose list ipv4 rule pr traffic--condition tcpg traffic-match-condition
- (Optional) Configure the condition to match one match
conditions.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set parent-group parent-group
- (Optional) Configure the condition to match one or more
parent groups in a hierarchical rate-limit action.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set parent-group parent-group
- (Optional) Configure the condition to match packets based
on the source route class.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set source-class source-class
- (Optional) Configure the condition to match packets based
on the destination route class.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set destination-class destination-class
- (Optional) Configure the condition to match packets based
on the traffic class.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set traffic-class traffic-class
- (Optional) Configure the condition to match packets based
on the packet color.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set color color
- (Optional) Configure the condition to match packets based
on the user packet class action number.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set user-packet-class user-packet-class
- (Optional) Configure the condition to match packets based
on packets destined for a local interface.
- [edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition]
- user@host# set destination-local-interface destination-local-interface
- (Optional) Verify the secondary input policy configuration.
[edit policies group junose list ipv4 rule pr traffic-condition tcpg traffic-match-condition] user@host# show