Alcatel-Lucent 7705 - Multi-Field Classification (MFC)

Filter Policies
7705 SAR OS Router Configuration Guide 279
Multi-field Classification (MFC)
Multi-field classification (MFC) allows untrusted traffic arriving on the access ports of the
7705 SAR to be reclassified and queued according to a forwarding class assigned to the
traffic.
Traffic is classified based on IP criteria. Arriving traffic has an ACL (also known as filter
policies) applied to it. If the ACL action is forward fc, a match results in the assignment
of the corresponding configured Forwarding Class (FC). This FC is used for queuing of the
packet through the 7705 SAR. The match can be based on any IP criteria currently supported
by the 7705 SAR IP filter policies.
When MFC is configured and a match is made on an arriving packet, the FC is based only on
the MFC configuration. The access ingress policy is no longer active for this packet.
Both PBR and MFC are configured under the IP filter configuration and the action of the filter
policy can include both PBR (next-hop ip-address) and MFC (fc fc-name).
If MFC is assigned to an L3 Spoke SDP termination interface, MFC classification is based
on the traffic’s customer-assigned inner IP packet. The filter policy rules are applied to the IP
criteria of the inner packet after the VC label and transport tunnel label have been removed
from the packet. Based on the matching criteria, the appropriate FC is assigned to the packet.
This functionality allows the customer packet to be marked with the correct DSCP before it
egresses the 7705 SAR. This applies only to an untrusted SAP configuration that has a SAP
egress QoS policy assigned to it.
MFC is supported at ingress for the following services and interfaces:
• IES and VPRN service
→ SAP
→ Layer 3 spoke SDP
→ routed VPLS
• router network interface (Global Routing Table (GRT))
• VLLs
→ Epipe
→ Ipipe
• VPLS
→ SAP
→ spoke or mesh SDP
Multi-field classification (MFC) is also supported on the private IPSec service (VPRN). MFC
functions in the same manner as the VPRN configuration of traditional services.