Juniper E Series

Applying Policy Lists to Interfaces and Profiles ! 67
Chapter 2: Creating Policies
! Rate limit
! Traffic class
! Classifiers
! Destination address
! Destination port
! Protocol
! Source address
! Source port
To create a policy, you use hexadecimal format to configure the Ascend-Data-Filter
attribute on the RADIUS server. For example:
Ascend-Data-Filter="01000100 0A020100 00000000 18000000 00000000 00000000"
Ta b l e 6 lists the fields in the order in which they are specified in the hexadecimal
Ascend-Data-Filter attribute.
NOTE: An E-series router dynamically assigns names to the new classifier list and
policy list based on information such as the interface and direction of the policy.
Table 6: Ascend-Data-Filter Policy Format
Action or Classifier Format Comments
Type 1 byte 0 = generic
1 = IP
Filter or forward 1 byte 0 = filter
1 = forward
Indirection 1 byte 0 = egress
1 = ingress
Spare 1 byte –
Source IP address 4 bytes –
Destination IP address 4 bytes –
Source IP prefix 1 byte Count of leading zeros in wildcard mask
Destination IP prefix 1 byte Count of leading zeros in wildcard mask
Protocol 1 byte –
Established 1 byte Not implemented
Source port 2 bytes –
Destination port 2 bytes –
Source port qualifier 1 byte 0 = no compare
1 = less than
2 = equal to
3 = greater than
4 = not equal to