policy (Subscriber Secure Policy)
Syntax
policy policy-name {
inet {
drop-policy rule-name {
from {
apply-groups group-name;
apply-groups-except group-name;
destination-address address;
destination-port port-number;
dscp dscp-value;
protocol protocol;
source-address address;
source-port port-number;
}
}
}
inet6 {
drop-policy rule-name {
from {
apply-groups group-name;
apply-groups-except group-name;
destination-address address;
destination-port port-number;
dscp dscp-value;
protocol protocol;
source-address address;
source-port port-number;
}
}
}
}
Hierarchy Level
[edit services radius-flow-tap]
Description
Specify the policy that is applied to mirrored packets sent to a mediation device.
Options
policy-name—Name of the policy from which to drop traffic.
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
flow-tap—To view this statement in the configuration.
flow-tap-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3.