Juniper E320 User Manual

CAM Hardware Classifiers ! 111
Chapter 4: Policy Resources
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group clacl2
host1(config-policy-list-classifier-group)#forward
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#classifier-group *
host1(config-policy-list-classifier-group)#filter
host1(config-policy-list-classifier-group)#exit
host1(config-policy-list)#exit
host1(config)#
In two cases a single classifier entry consumes more than one CAM entry:
! When a classifier entry contains a port range. For example:
host1(config)#ip classifier-list clacl3 tcp any any range 5 8
! When a classifier entry contains the not keyword. Although this keyword is
supported for IP classifier lists, we recommend that you not use it—you can
usually achieve the desired behavior without this keyword.
host1(config)#ip classifier-list clacl4 ip not host 1.1.1.1 any
In these cases, the actual number of entries that are consumed depends on the
configuration.
Size Limit for IP and IPv6 CAM Hardware Classifiers
The maximum width of a CAM hardware classifier entry for IP or IPv6 in a single
policy is 128 bits.
Some independent classifiers share the same classifier entry location, while others
are combined together to form a larger classifier field. However, you cannot
configure any combination of classifiers that exceeds the total classifier entry size of
128 bits.
IP Classifiers and Size Limits
Ta b l e 1 6 lists all IP classifiers and the size limit of each classifier entry.
Table 16: Size Limit of Individual IP Classifiers
IP Classifier Size Limit (Bits)
Color 2
Destination address 32
Destination port 16
Destination route class 8
ICMP type 8
ICMP code 8
IGMP type 8
IP flags 3
IP fragmentation 2

Juniper E320 Specifications

General

Rack Units	1U
Operating System	JUNOS
Product Type	Router
Routing Protocols	BGP, OSPF, IS-IS, RIP
Memory	4 GB
Redundancy	Power supply
Power Supply	AC

Summary

Chapter 2 Creating Policies

Creating Classifier Control Lists

Explains how to create Classifier Control Lists (CLACLs) to define packet flows.

Creating Policy Lists

Details the process of creating policy lists, which contain rules for policy actions.

Creating Classifier Groups and Policy Rules

Describes how to create classifier groups and policy rules within a policy list.

Merging Policies

Applying Policy Lists to Interfaces and Profiles

Details how to assign policy lists to interfaces and profiles for traffic management.

Chapter 3 Creating Rate-Limit Profiles

Rate Limits

Hierarchical Rate Limits

One-Rate Rate-Limit Profiles

Details how to create and configure one-rate rate-limit profiles for TCP applications.

Two-Rate Rate-Limits

Explains how to create two-rate rate-limit profiles for tiered rate-limit services.

Chapter 4 Policy Resources

FPGA Hardware Classifiers

Describes FPGA hardware classifiers used for packet classification with hardware assist.

CAM Hardware Classifiers

Software Classifiers

Chapter 5 Monitoring Policy Management

Overview

Setting a Statistics Baseline

Policy Management show Commands

Lists and describes the show commands used to display policy statistics and configurations.

Packet Flow Monitoring

Explains how to use the policy log rule to capture and monitor packet flows.

Chapter 6 Packet Mirroring

Overview

Introduces packet mirroring for traffic analysis, debugging, and troubleshooting.

Configuring CLI-Based Packet Mirroring

Explains how to use CLI commands to configure and manage packet mirroring.

Configuring RADIUS-Based Mirroring

Details how to configure RADIUS-based mirroring for specific users and sessions.

Conflicts Between CLI-Based and RADIUS-Based Configurations

Resolving and Tracking the Analyzer Device’s Address

Optimizing Packet Mirroring Performance

Logging Packet Mirroring Information

Monitoring Packet Mirroring