ZyXEL Communications UAG Series - Assured Forwarding (AF) PHB for Diffserv

Chapter 16 Route
UAG CLI Reference Guide
117
16.2.1 Assured Forwarding (AF) PHB for DiffServ
Assured Forwarding (AF) behavior is defined in RFC 2597. The AF behavior group defines four AF
classes. Inside each class, packets are given a high, medium or low drop precedence. The drop
precedence determines the probability that routers in the network will drop packets when
congestion occurs. If congestion occurs between classes, the traffic in the higher class (smaller
[no] user user_name Sets the user name. The no command resets the user name to the
default (any). any means all users.
[no] policy controll-ipsec-dynamic-rules
activate
Enables the UAG to use policy routes to manually specify the
destination addresses of dynamic IPSec rules. You must manually
create these policy routes. The UAG automatically obtains source and
destination addresses for dynamic IPSec rules that do not match any
of the policy routes.
The no command has the UAG automatically obtain source and
destination addresses for all dynamic IPSec rules.
policy default-route Enters the policy-route sub-command mode to set a route with the
name “default-route”.
policy delete policy_number Removes a routing policy.
policy flush Clears the policy routing table.
policy list table Displays all policy route settings.
policy move policy_number to policy_number Moves a routing policy to the number that you specified.
[no] policy override-direct-route activate Has the UAG forward packets that match a policy route according to
the policy route instead of sending the packets to a directly connected
network. Use the no command to disable it.
[no] policy controll-virtual-server-rules
activate
Gives policy routes priority over NAT virtual server rules (1-1 SNAT).
Use the no command to give NAT virtual server rules priority over
policy routes.
show bwm activation Displays whether or not the global setting for bandwidth management
on the UAG is enabled.
show bwm-usage < [policy-route
policy_number] | [interface
interface_name]
Displays the specified policy route or interface’s bandwidth allotment,
current bandwidth usage, and bandwidth usage statistics.
show policy-route [policy_number] Displays all or specified policy route settings.
show policy-route begin <1..200> end
<1..200>
Displays the specified range of policy route settings.
show policy-route conn-check [<1..5000>] Displays the connection check settings for the specified policy route.
show policy-route conn-check status
[<1..5000>]
Displays the connection check status for the specified policy route.
show policy-route controll-ipsec-dynamic-
rules
Displays whether the UAG checks policy routes first before IPSec
dynamic rules.
show policy-route override-direct-route Displays whether or not the UAG forwards packets that match a policy
route according to the policy route instead of sending the packets to a
directly connected network.
show policy-route controll-virtual-server-
rules
Displays whether or not policy routes have priority over NAT virtual
server rules (1-1 SNAT).
show policy-route rule_count Displays the number of policy routes that have been configured on the
UAG.
show policy-route underlayer-rules Displays all policy route rule details for advanced debugging.
Table 60 Command Summary: Policy Route (continued)
COMMAND DESCRIPTION