To Next Page

To Previous Page

Applying Policy Lists to Interfaces and Profiles ! 67

Chapter 2: Creating Policies

! Rate limit

! Traffic class

! Classifiers

! Destination address

! Destination port

! Protocol

! Source address

! Source port

To create a policy, you use hexadecimal format to configure the Ascend-Data-Filter

attribute on the RADIUS server. For example:

Ascend-Data-Filter="01000100 0A020100 00000000 18000000 00000000 00000000"

Ta b l e 6 lists the fields in the order in which they are specified in the hexadecimal

Ascend-Data-Filter attribute.

NOTE: An E-series router dynamically assigns names to the new classifier list and

policy list based on information such as the interface and direction of the policy.

Table 6: Ascend-Data-Filter Policy Format

Action or Classifier Format Comments

Type 1 byte 0 = generic

1 = IP

Filter or forward 1 byte 0 = filter

1 = forward

Indirection 1 byte 0 = egress

1 = ingress

Spare 1 byte –

Source IP address 4 bytes –

Destination IP address 4 bytes –

Source IP prefix 1 byte Count of leading zeros in wildcard mask

Destination IP prefix 1 byte Count of leading zeros in wildcard mask

Protocol 1 byte –

Established 1 byte Not implemented

Source port 2 bytes –

Destination port 2 bytes –

Source port qualifier 1 byte 0 = no compare

1 = less than

2 = equal to

3 = greater than

4 = not equal to

Juniper E Series Configuration Guide

Other manuals for Juniper E Series