Fortinet 548B, Administration Manual

Page: 380 / 976

- 380 -
Global Config
Policy Type
In
7.21.4 Service Commands
The 'service' command set is used in DiffServ to define:
Traffic Conditioning Assign a DiffServ traffic conditioning policy (as specified by the policy
commands) to an interface in the incoming direction.
Service Provisioning Assign a DiffServ service provisioning policy (as specified by the policy
commands) to an interface in the outgoing direction
The service commands attach a defined policy to a directional interface. Only one policy may be
assigned at any one time to an interface in a particular direction. The policy type (in, out) must match the
interface direction to which it is attached.
This set of commands consists of service addition/removal.
The CLI command root is service-policy
7.21.4.1 service-policy
This command attaches a policy to an interface in a particular direction.
Syntax
service-policy in <policy-map-name>
The command can be used in the Interface Config mode to attach a policy to a specific interface.
Alternatively, the command can be used in the Global Config mode to attach this policy to all system
interfaces. The direction value is either in or out.
<policy-map-name> - is the name of an existing DiffServ policy, whose type must match the
interface direction. Note that this command causes a service to create a reference to the policy.
i
This command effectively enables DiffServ on an interface (in a particular direction). There is
no separate interface administrative 'mode' command for DiffServ.
This command shall fail if any attributes within the policy definition exceed the capabilities of
the interface. Once a policy is successfully attached to an interface, any attempt to change the
policy definition such that it would result in a violation of said interface capabilities shall cause
the policy change attempt to fail.