Policy Classification Configuration Command Set
Assigning Classification Rules to Policy Profiles
Matrix NSA Series Configuration Guide
8-29
8.3.2.3
set policy classify
Use this command to assign incoming untagged frames to a specific policy profile, classification
and to VLAN or Class-of-Service classification rules.
set policy classify
profile-index classify-index
{
vlan
|
cos
} {
classify-value
|
forward
|
drop
} {
ether
|
llc
|
iptos
|
ipproto
|
ipxclass
|
ipxtype
|
ipsource
|
ipdest
|
ipxsource
|
ipxdest
|
udpportsource
|
udpportdest
|
tcpportsource
|
tcpportdest
|
ipxsourcesocket
|
ipxdestsocket
|
macsource
|
macdest
|
ipfrag
|
icmptype
|
vlantag
|
tci
|
port
} [
class-data-val
] [
class-data-mask
]
Syntax Description
NOTE:
Classification rules are automatically enabled when created.
profile-index
Specifies that this is an administrative rule or associates
this classification rule with a policy profile index
configured with the
set policy profile
command
(
Section 8.3.1.2
). Valid
profile-index
values are
1
-
1023
.
classify-index
Policy Classification Index (1-65535)
vlan
Specifies Vlan Classification Rule
cos
Specifies Class Of Service Classification Rule
classify-value
vlan / Class Of Service (0-4095)
forward
Specifies Forwarding of packet
drop
Specifies Dropping of packet
ether
Classifies based on type field in Ethernet II packet.
llc
DSAP/SSAP pair in 802.3 type packet field - (0 - 65535)
iptos
Classifies based on Type of Service field in IP packet.
ipproto
Classifies based on protocol field in IP packet.
ipsource
Classifies based on source IP address
ipdest
Classifies based on destination IP address
udpportsource
UDP port source - (0 - 65535)
udpportdest
UDP port destination - (0 - 65535)