Filter
Top Products
Advanced Configuration and Management Guide
The <operator> parameter applies only if you use the tcp or udp parameter above. Use the <operator>
parameter to specify the comparison condition for the specific TCP or UDP ports. For example, if you are
configuring QoS for HTTP, specify tcp eq http. You can enter one of the following operators:
• eq – The policy applies to the TCP or UDP port name or number you enter after eq.
• gt – The policy applies to TCP or UDP port numbers greater than the port number or the numeric equivalent
of the port name you enter after gt.
• lt – The policy applies to TCP or UDP port numbers that are less than the port number or the numeric
equivalent of the port name you enter after lt.
• neq – The policy applies to all TCP or UDP port numbers except the port number or port name you enter after
neq.
• range – The policy applies to all TCP or UDP port numbers that are between the first TCP or UDP port name
or number and the second one you enter following the range parameter. The range includes the port names
or numbers you enter. For example, to apply the policy to all ports between and including 23 (Telnet) and 53
(DNS), enter the following: range 23 53. The first port number in the range must be lower than the last
number in the range.
• established – This operator applies only to TCP packets. If you use this operator, the QoS policy applies to
TCP packets that have the ACK (Acknowledgment) or RST (Reset) bits set on (set to “1”) in the Control Bits
field of the TCP packet header. Thus, the policy applies only to established TCP sessions, not to new
sessions. See Section 3.1, “Header Format”, in RFC 793 for information about this field.
The in parameter applies the policy to packets received in the port.
The out parameter applies the policy to packets sent on the port.
NOTE: To apply the policy to traffic in both directions, enter two ip access-policy-group commands, one
specifying the in parameter, and the other specifying the out parameter.
The <policy-list> parameter is a list of policy IDs.
NOTE: The device applies the policies in the order you list them, so make sure you order them in such a away
that you receive the results you expect. Once a packet matches a policy, the device takes the action specified in
that policy and stops comparing the packet to the policies in the list.
2 - 18