Juniper E Series

Applying Policy Lists to Interfaces and Profiles ! 71
Chapter 2: Creating Policies
! Forward all packets from host 10.2.1.1 to any destination.
! Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be
specified in this order:
Ascend-Data-Filter = "01010100 0A020101 14000000 20080600 00000000 00000000"
Ascend-Data-Filter = "01000100 0A020101 00000000 20000600 00000000 00000000"
Ascend-Data-Filter = "01010100 0A020101 00000000 20000000 00000000 00000000"
Ascend-Data-Filter = "01000100 00000000 00000000 00000000 00000000 00000000"
! Output policy rules
! Forward all TCP packets from 20.0.0.0 0.255.255.255 to host 10.2.1.1.
! Filter all TCP packets from any source to host 10.2.1.1.
! Forward all packets from any source to host 10.2.1.1.
! Filter all other traffic.
The rules for the input policy translate to the following VSAs. The VSAs must be
specified in this order:
Ascend-Data-Filter = "01010000 14000000 0A020101 08200600 00000000 00000000"
Ascend-Data-Filter = "01000000 00000000 0A020101 00200600 00000000 00000000"
Ascend-Data-Filter = "01010000 00000000 0A020101 00200000 00000000 00000000"
Ascend-Data-Filter = "01000000 00000000 00000000 00000000 00000000 00000000"
Using the show classifier-list and show policy-list commands produces the
following information about the new policies:
host1:vr0#show classifier-list
Classifier Control List Table
---------- ------- ---- -----
IP clin_7_00.1 tcp host 10.2.1.1 20.0.0.0 0.255.255.255
IP clin_7_01.1 tcp host 10.2.1.1 any
IP clin_7_02.1 ip host 10.2.1.1 any
IP clout_7_04.1 tcp 20.0.0.0 0.255.255.255 host 10.2.1.1
IP clout_7_05.1 tcp any host 10.2.1.1
IP clout_7_06.1 ip any host 10.2.1.1
host1:vr0#show policy-list
Policy Table
------ -----
IP Policy plin_7
Administrative state: enable
Reference count: 1
Classifier control list: clin_7_00, precedence 100
forward
Classifier control list: clin_7_01, precedence 100
filter
Classifier control list: clin_7_02, precedence 100
forward
Classifier control list: *, precedence 100
filter