IN THIS PAGE
Configuring Destination Networks for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring Destination Grouped Networks for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring Protocol Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring Protocol Conditions with Ports for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring Protocol Conditions with Parameters for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring TCP Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring Traffic Match Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
Configuring PTSP Classify-Traffic Conditions (SRC CLI)
Before you configure PTSP classify-traffic conditions, review the following topics:
Topics that discuss configuring PTSP classify-traffic conditions include:
Creating PTSP Classify-Traffic Conditions (SRC CLI)
You create classify-traffic conditions within policy rules. Use the following configuration statements to create a classify-traffic condition:
To add a classify-traffic condition:
From configuration mode, create a classify-traffic condition inside a policy rule that has already been created and configured. For example, to create a traffic-condition called condition1 within policy rule rule1:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1(Optional) Specify the direction of the packet flow on which you want to match packets.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1]user@host# set match-direction match-directionSet to one of the following values:
input
output
both
Parameter of type matchDirection
(Optional) Provide a description of the classify-traffic condition.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1]user@host# set description description(Optional) Verify your PTSP classify-traffic condition configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1] user@host# show match-direction output; description "Destination classifier";
Configuring Destination Networks for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to add destination networks to a PTSP classify-traffic condition:
To add a destination network to a PTSP classify-traffic condition:
From configuration mode, enter the destination network within a classify-traffic condition. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network network(Optional) Specify the IP address of the destination network or host.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network network]user@host# set ip-address ip-addressWhere ip-address is one of the following values:
IP address
Predefined global parameter:
gateway_ipAddress—IP address of the gateway as specified by the service object.
interface_ipAddress—IP address of the router interface.
service_ipAddress—IP address of the service as specified by the service object.
user_ipAddress—IP address of the subscriber.
virtual_ipAddress—Virtual portal address of the SAE that is used in redundant redirect server installations.
Parameter of type address
(Optional) Configure the IP mask of the destination network or host.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network network]user@host# set ip-mask ip-maskWhere ip-mask is one of the following values:
IP address mask
Predefined global parameter:
interface_ ipMask—IP mask of the router interface.
service_ ipMask—IP mask of the service as specified by the service object.
user_ ipMask—IP mask of the subscriber.
Parameter of type address.
(Optional) Verify your destination network configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network network] user@host# show ip-address interface_ipAddress; ip-mask interface_ipMask;
See also
Configuring Destination Grouped Networks for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to add destination networks in a grouped format to a classify-traffic condition:
To add a grouped destination network to a classify-traffic condition:
From configuration mode, enter the destination network within a classify-traffic condition. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network group-network(Optional) Configure the IP address of the destination network or host.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network group-network]user@host# set network-specifier network-specifier(Optional) Verify your destination network configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 destination-network group-network] user@host# show network-specifier any;
See also
Configuring Protocol Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
The procedure in this topic shows how to configure protocol conditions that do not include port conditions.
If your condition includes port numbers, use the procedure in Configuring Protocol Conditions with Ports for PTSP Classify-Traffic Conditions (SRC CLI).
If your condition consists of a protocol that is assigned with a parameter value, use the procedure in Configuring Protocol Conditions with Parameters for PTSP Classify-Traffic Conditions (SRC CLI).
Use the following configuration statements to add general protocol conditions to a PTSP classify-traffic condition:
To add general protocol conditions to a classify-traffic condition:
From configuration mode, enter the general protocol condition configuration. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-conditionConfigure the protocol matched by this classify-traffic condition.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-condition]user@host# set protocol protocolEnter the protocol matched by this classifier list, one of the following values:
Predefined global parameter—Use a ? at the command line to see a list of valid protocols.
Protocol number in the range 0–255.
String expression.
Parameter of type protocol.
(Optional) Verify your protocol condition configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-condition] user@host# show protocol 0;
See also
Configuring Protocol Conditions with Ports for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to add general protocol conditions with ports to a PTSP classify-traffic condition:
To add general protocol conditions with ports to a PTSP classify-traffic condition:
From configuration mode, enter the protocol port condition configuration. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-conditionConfigure the protocol matched by this classify-traffic condition.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition]user@host# set protocol protocolUDP is the only valid value for PTSP.
(Optional) Enter the destination port configuration for the protocol port configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition]user@host# edit destination-port(Optional) Configure the destination port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition destination-port port]user@host# set from-port from-portWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object
Integer in the range 0–65535
Expression—A range of port numbers; for example, 10..20
Parameter of type port
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Enter the source port configuration for the protocol port configuration.
user@host# up[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition]user@host# edit source-port(Optional) Configure the source port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition source-port port]user@host# set from-port from-port[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition source-port port]user@host# upWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object.
Integer in the range 0–65535
Expression—A range of port numbers; for example, 10..20.
Parameter of type port
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Verify your protocol condition configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 protocol-port-condition] user@host# show protocol udp; destination-port { port { from-port service_port; } } source-port { port { from-port service_port; } }
See also
Configuring Protocol Conditions with Parameters for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to configure classify-traffic conditions that contain a parameter value for the protocol:
To configure a protocol condition that contains a parameter value for the protocol:
From configuration mode, enter the parameter protocol condition configuration. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-conditionAssign a parameter as the protocol matched by this classify-traffic condition.
Before you assign a parameter, you must create a parameter of type protocol and commit the parameter configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition]user@host# set protocol protocol(Optional) Enter the protocol attribute configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition]user@host# edit proto-attr(Optional) Enter the destination port configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr]user@host# edit destination-port port(Optional) Configure the TCP or UDP destination port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr destination-port port]user@host# set from-port from-portWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object.
Integer in the range 0–65535.
Expression—A range of port numbers; for example, 10..20.
Parameter of type port.
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Enter the source port configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr destination-port port]user@host# up[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr]user@host# edit source-port port(Optional) Configure the TCP or UDP source port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr source-port port]user@host# set from-port from-port[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr source-port port]user@host# up[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr source-port]user@host# up[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition proto-attr ]user@host# upWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object.
Integer in the range 0–65535.
Expression—A range of port numbers; for example, 10..20.
Parameter of type port.
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Verify the parameter protocol configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 parameter-protocol-condition] user@host# show protocol protocol; destination-port { port { from-port service_port; } } }
See also
Configuring TCP Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to add TCP conditions to a PTSP classify-traffic condition:
Because the protocol is already set to TCP, do not change the protocol or protocol-operation options.
To add TCP conditions to a PTSP classify-traffic condition:
From configuration mode, enter the TCP configuration. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition(Optional) Enter the protocol for the TCP configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition]user@host# set protocol protocolFor PTSP this is set to TCP.
(Optional) Enter the destination port configuration for the TCP configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition]user@host# edit destination-port port(Optional) Configure the destination port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition destination-port port]user@host# set from-port from-portWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object.
Integer in the range 0–65535.
Expression—A range of port numbers; for example, 10..20.
Parameter of type port.
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Enter the source port configuration for the TCP configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition source-port port]user@host# up[edit policies group group1 list list1 rule rule1 traffic-condition condition1]user@host# edit source-port port(Optional) Configure the source port.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition source-port port]user@host# set from-port from-port[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition source-port port]user@host# upWhere from-port is one of the following values:
service_port—A predefined global parameter that is the port of the service as specified by the service object.
Integer in the range 0–65535
Expression—A range of port numbers; for example, 10..20.
Parameter of type port
Use a range of ports to specify port numbers that are greater than or less than a specified port number. For example:
To set a range of ports that is greater than 10, use 11..65535.
To set a range of ports that is less than 200, use 0..199.
(Optional) Verify the TCP condition configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 tcp-condition] user@host# show protocol tcp; protocol-operation is; destination-port { port { from-port service_port; } } source-port { port { from-port service_port; } }
See also
Configuring Traffic Match Conditions for PTSP Classify-Traffic Conditions (SRC CLI)
Use the following configuration statements to configure traffic match conditions for PTSP classify traffic conditions.
To add traffic match conditions to PTSP classify-traffic conditions:
From configuration mode, enter the traffic condition configuration. For example:
user@host# edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition(Optional) Configure the application protocol to match.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition]user@host# set application [application...](Optional) Configure a list of application groups to match for this policy.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition]user@host# set application-group [application-group...](Optional) Configure a list of nested applications to match this policy.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition]user@host# set nested-application [nested-application...]Separate items in the list with commas.
(Optional) Configure the term-precedence for this term in a given policy in relation to other terms. Lower precedence terms are searched first. Precedence matters only within the same class of policies, either dynamic or static. Terms with the same precedence may be evaluated in any order.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition]user@host# set term-precedence term-precedenceEnter an integer in the range 1–254.
(Optional) Verify the filter condition configuration.
[edit policies group group1 list list1 rule rule1 traffic-condition condition1 traffic-match-condition] user@host# show term—precedence 100; application—group group1; }