Juniper E320 User Manual

JUNOSe 7.2.x Policy Management Configuration Guide
50 ! Merging Policies
Policy Attachment Rules
The attributes of a policy attachment are as follows:
! Policy name—Name of policy to be attached.
! Attachment type—Type of attachment.
! Statistics enable/disable—Enable or disable statistics for the attachment.
! Baseline enable/disable—Enable or disable baselining for the attachment.
! Merge or Replace—Allow an attachment to become merge-capable and merge
with any other attachments that are merge-capable. If the merge keyword is
not specified, then it replaces any existing attachments with the new
attachment. Merging always preserves statistics.
! Preserve—Preserve statistics from earlier attachment when replacing an
attachment. This keyword is mutually exclusive with merge keyword.
Various possibilities result from a policy attachment at an interface due to the
presence or absence of these keywords. The same rules apply while attaching
policies based on interface profiles provided by Service Manager except as noted.
Attachments made through Interface Configuration mode follow these rules:
! If an attachment is issued with the merge keyword specified:
! Any existing attachment of the same type at the interface without the
merge keyword is replaced by the new attachment, which then becomes
merge-capable.
! An attachment is merged with any existing attachments of the same type
that have the merge keyword set. If a merged policy already exists for the
set of component policies, then this merged policy is used or a new merged
policy is created dynamically and attached. The statistics for common
classifier groups are preserved when replacing the existing merged
attachment.
! If an attachment is issued when no merge or preserve keyword is set, then it
replaces all other attachments with the same type at the interface. This
attachment is not merge-capable for future use and statistics from previous
attachments are not preserved.
! If an attachment is issued when the merge keyword is not set, but the preserve
keyword is set, it replaces all other attachments with the same type at the
interface. This attachment is not merge-capable for future use. Statistics from
existing attachments are preserved for all the common classifier-groups.
! You cannot have multiple attachments of the same policy on a single
attachment point. Only Service Manager executes multiple attachments of the
same policy at the same attachment point.

Juniper E320 Specifications

General

Rack Units	1U
Operating System	JUNOS
Product Type	Router
Routing Protocols	BGP, OSPF, IS-IS, RIP
Memory	4 GB
Redundancy	Power supply
Power Supply	AC

Summary

Chapter 2 Creating Policies

Creating Classifier Control Lists

Explains how to create Classifier Control Lists (CLACLs) to define packet flows.

Creating Policy Lists

Details the process of creating policy lists, which contain rules for policy actions.

Creating Classifier Groups and Policy Rules

Describes how to create classifier groups and policy rules within a policy list.

Merging Policies

Applying Policy Lists to Interfaces and Profiles

Details how to assign policy lists to interfaces and profiles for traffic management.

Chapter 3 Creating Rate-Limit Profiles

Rate Limits

Hierarchical Rate Limits

One-Rate Rate-Limit Profiles

Details how to create and configure one-rate rate-limit profiles for TCP applications.

Two-Rate Rate-Limits

Explains how to create two-rate rate-limit profiles for tiered rate-limit services.

Chapter 4 Policy Resources

FPGA Hardware Classifiers

Describes FPGA hardware classifiers used for packet classification with hardware assist.

CAM Hardware Classifiers

Software Classifiers

Chapter 5 Monitoring Policy Management

Overview

Setting a Statistics Baseline

Policy Management show Commands

Lists and describes the show commands used to display policy statistics and configurations.

Packet Flow Monitoring

Explains how to use the policy log rule to capture and monitor packet flows.

Chapter 6 Packet Mirroring

Overview

Introduces packet mirroring for traffic analysis, debugging, and troubleshooting.

Configuring CLI-Based Packet Mirroring

Explains how to use CLI commands to configure and manage packet mirroring.

Configuring RADIUS-Based Mirroring

Details how to configure RADIUS-based mirroring for specific users and sessions.

Conflicts Between CLI-Based and RADIUS-Based Configurations

Resolving and Tracking the Analyzer Device’s Address

Optimizing Packet Mirroring Performance

Logging Packet Mirroring Information

Monitoring Packet Mirroring