To Next Page

To Previous Page

Creating Classifier Groups and Policy Rules ! 35

Chapter 2: Creating Policies

The following guidelines apply when you create a group of forwarding solutions in

an IP policy list:

! You can specify a maximum of 20 forwarding solutions for a classifier.

! The interface and next-hop elements of a forwarding solution must exist within

a single virtual router:

! Next-interface elements are associated with the virtual router where that

interface exists.

! You can include an optional parameter to specify the virtual router when

you define next-hop elements.

! If only next-hop elements exist and you do not use the virtual router

option, then the policy assumes the virtual router context of the

command-line interface (CLI).

! If you specify both an interface element and a next-hop address element, then

they both must be reachable to be used. Also, the interface must be the correct

interface for the next-hop address.

! If you specify a next-hop address, then you can optionally specify that the

default route be ignored.

! If you delete the target (interface or next-hop address) referenced in a rule, that

solution is replaced by the null interface but retains the same order number in

the policy list. The null interface is always considered unreachable.

! When a forwarding solution with a lower order value than the currently active

solution becomes reachable, the router switches to the lower-ordered solution.

! If two rules that have the same order value are reachable, then the rule that was

created first is used.

In the following sample classifier group of a policy list, the forwarding solution of

ATM interface 0/0.1 has the lowest order value in the group, and would therefore be

selected as the solution for the policy list. However, if this interface is not reachable,

the router then attempts to use the solution with the next higher order; which

would be ATM interface 12/0.1. If none of the solutions in the group is reachable,

the traffic is dropped.

host1(config-policy-list)#classifier-group westfordClacl precedence 200

host1(config-policy-list-classifier-group)#forward interface atm 0/0.1 order 10

host1(config-policy-list-classifier-group)#forward interface atm 12/0.1 order 50

host1(config-policy-list-classifier-group)#forward interface atm 3/0.25 order 300

NOTE: The forward interface and forward next-hop commands are replacing the

next-interface and next-hop commands, which do not support multiple

forwarding solutions in a single forward rule.

Juniper E Series Configuration Guide

Other manuals for Juniper E Series