Fortinet 548B Switch User Manual


 
- 361 -
'all' within 'all'
no nested 'not' conditions
no nested 'acl' class types
each class contains at most one referenced class
hierarchical service policies not supported in a class definition
access list matched by reference only, and must be sole criterion in a class
that is, ACL rules copied as class match criteria at time of class creation, with class type 'any'
implicit ACL 'deny all' rule also copied
no nesting of class type 'acl'
Regarding nested classes, referred to here as class references, a given class definition can contain at
most one reference to another class, which can be combined with other match criteria. The referenced
class is truly a reference and not a copy, since additions to a referenced class affect all classes that
reference it. Changes to any class definition currently referenced by any other class must result in valid
class definitions for all derived classes otherwise the change is rejected. A class reference may be
removed from a class definition.
The user can display summary and detailed information for classes, policies, and services. All
configuration information is accessible via the CLI, Web, and SNMP user interfaces.
le
7.21.1 General Commands
The following characteristics are configurable for the platform as a whole.
7.21.1.1 diffserv
This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is
retained and can be changed, but it is not activated. When enabled, Diffserv services are activated.
Syntax
diffserv
Command Mode
Global Config
7.21.1.2 no diffserv
This command sets the DiffServ operational mode to inactive. While disabled, the DiffServ configuration
is retained and can be changed, but it is not activated. When enabled, Diffserv services are activated.