• Downloads
• Configuring Classify-Traffic Conditions     

• Related Topics
• Before You Configure Classify-Traffic Conditions
• Configuring Classify-Traffic Conditions (C-Web Interface)
• Enabling Expansion of JUNOSe Classify-Traffic Conditions (SRC CLI)
• Specifying Port Access for Traffic Classification (SRC CLI)
• Parameter Types

Configuring Classify-Traffic Conditions

You create classify-traffic conditions in JUNOSe policy rules, in JUNOS ASP and JUNOS filter policy rules, and in PCMM policy rules.

The available configuration statements change depending on the type of policy rule that holds the condition and on the type of protocol that you specify.

To configure a classify-traffic condition, do the following:

1. Create a classify-traffic condition.
   • Creating a Classify-Traffic Condition (SRC CLI)
2. Configure source networks. You can configure source networks in one of two formats.
   • Configuring Source Networks (SRC CLI)
   • Configuring Source Grouped Networks (SRC CLI)
3. Configure destination networks. You can configure destination networks in one of two formats.
   • Configuring Destination Networks (SRC CLI)
   • Configuring Destination Grouped Networks (SRC CLI)
4. Configure protocol conditions. The type of protocol condition that you use depends on your configuration.
   • To configure protocol conditions that do not include ports, see:
     • Configuring Protocol Conditions (SRC CLI)
   • To configure protocol conditions that include ports, see:
     • Configuring Protocol Conditions with Ports (SRC CLI)
   • To configure protocol conditions in which the protocol that you specify is a parameter, see:
     • Configuring Protocol Conditions with Parameters (SRC CLI)
   • To configure protocol conditions in which the protocol is TCP, see:
     • Configuring TCP Conditions (SRC CLI)
   • To configure protocol conditions in which the protocol is ICMP, see:
     • Configuring ICMP Conditions (SRC CLI)
   • To configure protocol conditions in which the protocol is IGMP, see:
     • Configuring IGMP Conditions (SRC CLI)
   • To configure protocol conditions in which the protocol is IPSec, see:
     • Configuring IPSec Conditions (SRC CLI)
   • To configure a ToS byte condition, see:
     • Configuring ToS Byte Conditions (SRC CLI)
5. For JUNOS filter policies, configure a JUNOS filter condition. See:
   • Configuring JUNOS Filter Conditions (SRC CLI)
6. For JUNOSe parent—group reference policies, configure a JUNOSe filter condition. See:

   Configuring JUNOSe Parent-Group References (SRC CLI)

7. For JUNOSe secondary input policies, configure a traffic match condition for the packet flow. See:
   • Configuring JUNOSe Secondary Input Policy Conditions (SRC CLI)
8. For the stateful firewall and NAT policies, configure an application protocol condition. See:
   • Configuring Application Protocol Conditions (SRC CLI)

Note: PCMM classifiers support only the following classifiers: Source and destination IP addresses Network protocol Source or destination port Type-of-service (ToS) byte and ToS mask The policy engine ignores all other values.

---

Published: 2009-09-22

---

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.