set policy rule
11-10 Policy Classification Configuration
|Ether II packet type | | | X | X | X | X | | | |
|LLC DSAP/SSAP/CTRL | | | | | | | | | |
|VLAN tag | | | | | | | | | |
|Replace tci | | | | | | | | | |
|Port string | X | X | X | X | X | X | | | |
=============================================================
set policy rule
Usethiscommandtoassignincomingunt aggedframestoaspecificpolicyprofileandtoVLANor
Class‐of‐Serviceclassificationrules.
Thiscommandhastwoformsofsyntax—onetocreateanadminrule(forpolicyID0),andthe
othertocreateaclassificationruleandattach ittoa
policyprofile.
set policy rule admin-profile {vlantag data [mask mask] admin-pid profile-index}
[port-string port-string]
set policy rule profile-index {ether | icmptype | ipproto | ipdestsocket |
ipsourcesocket | iptos | macdest | macsource | tcpdestport | tcpsourceport |
udpdestport | udpsourceport} data [mask mask] [vlan vlan] [cos cos] | [drop |
forward]
Parameters
Thefollowingparametersapplytocreatinganadminrule.
Thefollowingparametersapplytocreatingaclassificationrule.
Note: Classification rules are automatically enabled when created.
admin‐profile SpecifiesthatthisisanadminruleforpolicyID0.
vlantagdata ClassifiesbasedonVLANtagspecifiedbydata.Valueofdatacanrange
from1to4094or0xFFF.
maskmask (Optional)Specifiesthenumberofsignificantbitstomatch,dependent
onthedatavalueentered.Valueof
maskcanrangefrom1to12.
RefertoTable 11‐30forvalidvaluesforeachclassificationtypeanddata
value.
admin‐pid
profile‐index
Associatesthisadminrulewithapolicyprofile,identifiedbyitsindex
number.Policyprofilesareconfiguredwiththesetpolicyprofile
commandasdescribed
in“setpolicyprofile”onpage 11‐3.
Validprofile‐indexvaluesare1‐255.
port‐stringport‐string (Optional)Assignsthisruletothespecifiedpolicyprofileonspecific
ingressport(s).Rulewouldnotbeuseduntilpolicyisassignedtothe
specifiedport(s) usingthesetpolicyportcommand
asdescribedin“set
policyport”onpage 11‐15.