Filter
Top Products
Policy Classification Configuration Command Set
Assigning Classification Rules to Policy Profiles
Matrix NSA Series Configuration Guide 8-31
8.3.2.4 set policy rule
Use this command to assign incoming untagged frames to a specific policy profile and to VLAN or
Class-of-Service classification rules.
set policy rule admin-profile | profile-index {ether | ipfrag | ipproto | ipdest |
ipsource | iptos | llcDsapSsap | macdest | macsource | | port | tcpdestport |
tcpsourceport | udpdestport | udpsourceport} data [mask mask] [port-string
port-string] [storage-type {non-volatile | volatile}] [vlan vlan] | [drop | forward]
[admin-pid admin-pid] [cos cos]
Syntax Description
NOTE: Classification rules are automatically enabled when created.
admin-profile |
profile-index
Specifies that this is an administrative rule or associates
this classification rule with a policy profile index
configured with the set policy profile command
(Section 8.3.1.2). Valid profile-index values are 1- 1023.
NOTE: Admin profiles can be assigned to a
specific ingress port by specifying port-string
and admin-pid values as described below.
ether Classifies based on type field in Ethernet II packet.
ipdest Classifies based on destination IP address.
ipfrag Classifies based on IP fragmentation value.
ipproto Classifies based on protocol field in IP packet.
ipsource Classifies based on source IP address.
iptos Classifies based on Type of Service field in IP packet.
llcDsapSsap Classifies based on DSAP/SSAP pair in 802.3 type
packet.
macdest Classifies based on MAC destination address.
macsource Classifies based on MAC source address.
port Classifies based on port-string.
tcpdestport Classifies based on TCP destination port with.