set policy rule
15-10 Policy Classification Configuration
|ICMP packet type | | | | | | | | | |
|TTL | | | | | | | | | |
|IP type of service | | | | X | X | X | | | |
|IP proto | | | | X | X | X | | | |
|Ether II packet type | | | X | X | X | X | | | |
|LLC DSAP/SSAP/CTRL | | | | | | | | | |
|VLAN tag | | | | | | | | | |
|Replace tci | | | | | | | | | |
|Port string | X | X | X | X | X | X | | | |
=============================================================
set policy rule
Use this command to assign incoming untagged frames to a specific policy profile and to VLAN or
Class-of-Service classification rules.
Syntax
This command has two forms of syntax—one to create an admin rule, and the other to create a
traffic classification rule and attach it to a policy profile.
set policy rule admin-profile vlantag data admin-pid profile-index [port-string
port-string]
set policy rule profile-index {ether |ipproto | ipdestsocket | ipsourcesocket |
iptos | macdest | macsource | tcpdestport | tcpsourceport | udpdestport |
udpsourceport} data [mask mask] {[vlan vlan] [cos cos] | [drop | forward]}
Parameters
The following parameters apply to creating an admin rule. See the Usage section below for more
information about admin rules.
Note: Refer to the latest Release Notes for information about limits on certain rule types for this
platform.
Note: Classification rules are automatically enabled when created.
admin-profile Specifies that this is an admin rule.
vlantag data Classifies based on VLAN tag specified by data. Value of data can range
from 1 to 4094 or 0xFFF.
admin-pid
profile-index
Associates this admin rule with a policy profile, identified by its index
number. Policy profiles are configured with the set policy profile
command as described in “set policy profile” on page 15-3.
Valid profile-index values are 1- 255.
port-string port-string (Optional) Assigns this rule to specific ingress port(s) and sets tagged
egress for the VLAN on the ports.
If this parameter is not used, the rule will be applied to all ports, but no
tagged egress will be set.
To Next Page
Loading...
