policy

Syntax

policy[] class {ip|ipv6|mac}  action {||} [{||}] [] comment ... no policy

Description

Creates, modifies, or deletes a classifier policy. A policy contains one or more policy entries ordered and prioritized by sequence numbers. Each entry has an IPv4/IPv6/MAC class and one or more policy actions associated with it. An applied policy processes a packet sequentially against policy entries in the list until the last entry in the list has been evaluated or the packet matches an entry. If a match occurs the related entry, actions are taken.

Thenoform of this command is used to delete a policy or an individual policy entry.

Command context

config

Thepolicycommand takes you into theconfig-policycontext where you enter the policy entries.

Parameters

Specifies the name of the policy.

Specifies a sequence number for the policy entry. Optional. Range: 1 to 4294967295.

comment

Stores the remaining entered text as a policy entry comment.

class {ip|ipv6|mac}

Specifies a type of class,ipfor IPv4,ipv6for IPv6 andmacfor a MAC policy. And specifies a class name.

Remark actions can be any of the following options:{pbr| pcp| ip-precedence| dscp| local-priority}where:

pbr

Specifies the PBR action list to be used.

pcp

Specifies Priority Code Point (PCP) value. Range: 0 to 7.

ip-precedence

Specifies the numeric IP precedence value. Range: 0 to 7.

dscp

Specifies a Differentiated Services Code Point (DSCP) value. Enter either a numeric value (0 to 63) or a keyword as follows:

  • AF11- DSCP 10 (Assured Forwarding Class 1, low drop probability)

  • AF12- DSCP 12 (Assured Forwarding Class 1, medium drop probability)

  • AF13- DSCP 14 (Assured Forwarding Class 1, high drop probability)

  • AF21- DSCP 18 (Assured Forwarding Class 2, low drop probability)

  • AF22- DSCP 20 (Assured Forwarding Class 2, medium drop probability)

  • AF23- DSCP 22 (Assured Forwarding Class 2, high drop probability)

  • AF31- DSCP 26 (Assured Forwarding Class 3, low drop probability)

  • AF32- DSCP 28 (Assured Forwarding Class 3, medium drop probability)

  • AF33- DSCP 30 (Assured Forwarding Class 3, high drop probability)

  • AF41- DSCP 34 (Assured Forwarding Class 4, low drop probability)

  • AF42- DSCP 36 (Assured Forwarding Class 4, medium drop probability)

  • AF43- DSCP 38 (Assured Forwarding Class 4, high drop probability)

  • CS0- DSCP 0 (Class Selector 0: Default)

  • CS1- DSCP 8 (Class Selector 1: Scavenger)

  • CS2- DSCP 16 (Class Selector 2: OAM)

  • CS3- DSCP 24 (Class Selector 3: Signaling)

  • CS4- DSCP 32 (Class Selector 4: Real time)

  • CS5- DSCP 40 (Class Selector 5: Broadcast video)

  • CS6- DSCP 48 (Class Selector 6: Network control)

  • CS7- DSCP 56 (Class Selector 7)

  • EF- DSCP 46 (Expedited Forwarding)

local-priority

Specifies a local priority value. Range: 0 to 7.

Police actions can be the following{circbsexceed}where:

cir

Specifies a Committed Information Rate value in Kilobits per second. Range: 1 to 4294967295.

cbs

Specifies a Committed Burst Size value in bytes. Range: 1 to 4294967295.

exceed

Specifies action to take on packets that exceed the rate limit.

Other actions can be the following:

drop

Specifies drop traffic.

Authority

Administrators or local user group members with execution rights for this command.

Restrictions

MAC类不适用政策包含ing PBR actions. Applying such policies to an interface are blocked.

Usage

  • For Policy Based Routing, the policy action keyword ispbrwhich itself takes the name of a PBR action list as a parameter.

  • A policy entry that contains a PBR action can contain other action types as well.

  • An applied policy processes a packet sequentially against policy entries in the list until the last policy entry in the list has been evaluated or the packet matches an entry.

  • Entering an existingvalue will cause the existing policy to be modified, with any newvalue creating an additional policy entry, and any existingvalue replacing the existing policy entry with the same sequence number.

  • If no sequence number is specified, a new policy entry is appended to the end of the entry list with a sequence number equal to the highest policy entry currently in the list plus 10.

  • On an 8400 switch, IP remarking (ip-precedence,dscp) will only be performed if the packet is routed.

Examples

Create a policy with two PBR actions:

switch(config)#policy pbr_policyswitch (config-policy)#10 class ip v4_class action pbr action_list1switch (config-policy)#20 class ipv6 v6_class action pbr action_list2switch (config-policy)#exit