> - Downloads
> - Configuring Classify-Traffic Conditions
> - Related Topics
> - Before You Configure Classify-Traffic Conditions
> - Configuring Classify-Traffic Conditions (C-Web Interface)
> - Enabling Expansion of JUNOSe Classify-Traffic Conditions (SRC CLI)
> - Specifying Port Access for Traffic Classification (SRC CLI)
> - Parameter Types

> # Configuring Classify-Traffic Conditions

> You create classify-traffic conditions in JUNOSe policy rules, in JUNOS ASP and JUNOS filter policy rules, and in PCMM policy rules.

> The available configuration statements change depending on the type of policy rule that holds the condition and on the type of protocol that you specify.

> To configure a classify-traffic condition, do the following:

> 1. Create a classify-traffic condition.
>    - Creating a Classify-Traffic Condition (SRC CLI)
> 2. Configure source networks. You can configure source networks in one of two formats.
>    - Configuring Source Networks (SRC CLI)
>    - Configuring Source Grouped Networks (SRC CLI)
> 3. Configure destination networks. You can configure destination networks in one of two formats.
>    - Configuring Destination Networks (SRC CLI)
>    - Configuring Destination Grouped Networks (SRC CLI)
> 4. Configure protocol conditions. The type of protocol condition that you use depends on your configuration.
>    - To configure protocol conditions that do not include ports, see:
>      - Configuring Protocol Conditions (SRC CLI)
>    - To configure protocol conditions that include ports, see:
>      - Configuring Protocol Conditions with Ports (SRC CLI)
>    - To configure protocol conditions in which the protocol that you specify is a parameter, see:
>      - Configuring Protocol Conditions with Parameters (SRC CLI)
>    - To configure protocol conditions in which the protocol is TCP, see:
>      - Configuring TCP Conditions (SRC CLI)
>    - To configure protocol conditions in which the protocol is ICMP, see:
>      - Configuring ICMP Conditions (SRC CLI)
>    - To configure protocol conditions in which the protocol is IGMP, see:
>      - Configuring IGMP Conditions (SRC CLI)
>    - To configure protocol conditions in which the protocol is IPSec, see:
>      - Configuring IPSec Conditions (SRC CLI)
>    - To configure a ToS byte condition, see:
>      - Configuring ToS Byte Conditions (SRC CLI)
> 5. For JUNOS filter policies, configure a JUNOS filter condition. See:
>    - Configuring JUNOS Filter Conditions (SRC CLI)
> 6. For JUNOSe parent—group reference policies, configure a JUNOSe filter condition. See:

>    Configuring JUNOSe Parent-Group References (SRC CLI)

> 7. For JUNOSe secondary input policies, configure a traffic match condition for the packet flow. See:
>    - Configuring JUNOSe Secondary Input Policy Conditions (SRC CLI)
> 8. For the stateful firewall and NAT policies, configure an application protocol condition. See:
>    - Configuring Application Protocol Conditions (SRC CLI)

> | Note: PCMM classifiers support only the following classifiers: Source and destination IP addresses Network protocol Source or destination port Type-of-service (ToS) byte and ToS mask The policy engine ignores all other values.

> #### Published: 2009-09-22

> Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.