Home
Juniper
Network Router
E Series
Juniper E Series Configuration Guide
4
of 1
of 1 rating
212 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
JUNOSe 7.2.x Policy
Management Configuration Guide
146
!
Packet Flow Monitor
ing
Out Policed Packets 0,
Bytes 0
Out Discar
ded Packet
s 2269
IP policy
input ping
Attack
classifi
er-group i
cmpEchoRe
q entry 1
488421
packets,
69355782
bytes
log
queue 0: t
raffic cla
ss best-e
ffort, bou
nd to ip G
igabitEthern
et0/0
Queue length 0 bytes
Forwarded packets 48598
8, bytes 70954
248
Dropped committed packe
ts 0, bytes 0
Dropped conformed packe
ts 0, bytes 0
Dropped
exceeded p
ackets 0,
bytes 0
161
163
Table of Contents
Default Chapter
1
Default Chapter
1
Configuration Guide
1
Policy Management
1
Table of Contents
5
About this Guide
9
Objectives
9
E-Series Routers
9
Audience
9
Documentation Conventions
9
Related E-Series and Junose Documentation
12
E-Series and Junose Documents
12
Junose Configuration Guides
14
Obtaining Documentation
15
Documentation Feedback
15
Requesting Support
15
Chapter 1 Policy Management Overview
17
Overview
17
What Is a Policy
18
Classification
19
Policy Resources
19
Packet Mirroring
19
Platform Considerations
20
References
20
Creating Policies
21
Overview
21
Chapter 2 Creating Policies
21
Policy Processing Order on an Interface Stack
22
Policy Management Configuration Tasks
22
Platform Considerations
23
Creating Classifier Control Lists
23
Classifier Control List Commands
25
Creating Policy Lists
35
Creating a Policy List for ATM
36
Creating a Policy List for IP
38
Creating a Policy List for Ipv6
40
Creating a Policy List for Frame Relay
40
Creating a Policy List for GRE Tunnels
42
Creating a Policy List for L2TP
43
Creating a Policy List for MPLS
44
Creating a Policy List for Vlans
45
Policy List Configuration Commands
46
Creating Classifier Groups and Policy Rules
47
Policy Rule Support
47
Rules that Provide Routing Solutions
49
Security
49
Creating Multiple Forwarding Solutions with IP Policy Lists
50
Classifier Group Command
52
Policy Rule Commands
52
Packet Tagging
60
Merging Policies
60
Rules for Attachment through Interface Configuration Mode
61
Policy Merging Restrictions
62
Resolving Merge Conflicts
62
Merged Policy Naming Conventions
65
Reference Counting
65
Persistent Configuration Differences
65
Policy Attachment Sequence at Login
65
Policy Attachment Rules
66
Error Conditions
67
Merging Policies Configuration Example
67
Show Configuration
69
Display Interface Statistics
70
Applying Policy Lists to Interfaces and Profiles
79
Policy Commands
80
Enabling ATM Cell Mode
82
Enabling IP Options Filtering
82
Using RADIUS to Create and Apply Policies
82
Examples Using the Ascend-Data-Filter Attribute
85
Chapter 3 Creating Rate-Limit Profiles
91
Overview
91
Platform Considerations
92
Rate Limits
92
Hierarchical Rate Limits
93
Classifier Groups
94
Rate-Limit Profiles
95
Rate-Limit Actions
95
Rate-Limiting Hierarchical Policy Examples
97
Multiple Flows Sharing Preferred Bandwidth
97
Multiple Flows Sharing a Rate Limit
98
Shared Pool of Additional Bandwidth with Select Flows
99
Aggregate Marking with Oversubscription
101
Color-Aware Configuration
103
One-Rate Rate-Limit Profiles
104
Creating a One-Rate Rate-Limit Profile
105
Configuring a TCP-Friendly One-Rate Rate-Limit Profile
105
Two-Rate Rate-Limits
107
Creating a Two-Rate Rate-Limit Profile
110
Rate-Limit Commands
111
Bandwidth Management
118
One-Rate Rate-Limit Profile
120
Two-Rate Rate-Limit Profile
120
Rate Limiting Individual or Aggregate Packet Flows
121
Policy Resources
123
Overview
123
Chapter 4 Policy Resources
123
Platform Considerations
125
FPGA Hardware Classifiers
125
CAM Hardware Classifiers
126
Size Limit for IP and Ipv6 CAM Hardware Classifiers
127
IP Classifiers and Size Limits
127
Ipv6 Classifiers and Size Limits
129
Software Classifiers
133
Interface Attachment Resources
134
Cam Hardware Classifiers and Interface Attachment Resources
134
Software Classifiers and Range Vector Hardware Classifiers and Interface Attachment Resources
135
Chapter 5 Monitoring Policy Management
137
Overview
137
Platform Considerations
137
Setting a Statistics Baseline
138
Policy Management Show Commands
139
Packet Flow Monitoring
160
Packet Mirroring
163
Overview
163
Chapter 6 Packet Mirroring
163
Comparing CLI-Based Mirroring and RADIUS-Based Mirroring
164
Configuration
164
Security
165
Application
165
Packet Mirroring Terms
166
Platform Considerations
167
References
167
Configuring CLI-Based Packet Mirroring
167
Enabling and Securing CLI-Based Packet Mirroring
168
Reloading a CLI-Based Packet Mirroring Configuration
169
Using TACACS+ and Vty Access Lists to Secure Packet Mirroring
170
Using Vty Access Lists to Secure Packet Mirroring
170
Sequence of Events
171
CLI-Based Mirroring Procedure
172
Configuring the Analyzer Device
172
Configuring the E-Series Router
172
Configuring CLI-Based Interface-Specific Mirroring
173
Configuring CLI-Based User-Specific Mirroring
174
Commands and Guidelines
175
Configuring RADIUS-Based Mirroring
181
RADIUS Attributes Used for Packet Mirroring
181
Dynamically Created Secure Policies
182
Mirroring MLPPP Sessions
182
Sequence of Events
183
RADIUS-Based Mirroring Procedure
184
Configuring the RADIUS Server
184
Disabling RADIUS-Based Mirroring
184
Configuring the Analyzer Device
185
Configuring the E-Series Router: Start Mirroring When User Logs on
185
Configuring the E-Series Router: Mirror User Who Is Already Logged on
185
Configuring RADIUS-Initiated Mirroring When a User Is Already Logged in
186
Commands and Guidelines
187
Conflicts between CLI-Based and RADIUS-Based Configurations
190
Understanding the Prepended Header
190
Format of the Mirror Header Attributes
192
Resolving and Tracking the Analyzer Device's Address
193
Using Multiple Triggers
193
Optimizing Packet Mirroring Performance
194
Logging Packet Mirroring Information
196
Using Secure Local Logs
196
Using SNMP Secure Packet Mirroring Traps
197
Configuring SNMP Secure Packet Mirroring Traps
199
Monitoring Packet Mirroring
202
Index
209
Other manuals for Juniper E Series
Hardware Guide
216 pages
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Juniper E Series and is the answer not in the manual?
Ask a question
Juniper E Series Specifications
General
Brand
Juniper
Model
E Series
Category
Network Router
Language
English
Related product manuals
Juniper MX240
31 pages
Juniper MX960
34 pages
Juniper MX480
31 pages
Juniper MX104
30 pages
Juniper ACX5448
36 pages
Juniper MX10003
27 pages
Juniper ACX5048
232 pages
Juniper ACX1100
216 pages
Juniper MX Series
2 pages
Juniper ACX Series
33 pages
Juniper EX2200 Series
224 pages
J-series Services Router J2320
330 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
