specified numerically for either out-of-profile or in-profile actions. The numeric value is a
decimal integer action code shown in the table below. If the action requires a parameter, the
parameter value is multiplied by 256 and added to the action code. Only a few of the actions are
possible for out-of-profile. All can be used for in-profile.
Policing Actions
Action
Code
Out Action
Set 802.1p priority for packet to value
64+
No
Set IP TOS field to value (IPV4 only)
66+
No
Send a copy of the packet to CPU
67
Yes
Redirect the packet to port given
69+
No
Mirror the packet to the port given
70+
No
Copy the IP TOS precedence to 802.1p priority (IPV4 only)
72
No
Copy the 802.1p priority to the IP TOS precedence (IPV4
only)
73
No
Set the Differentiated Service field to value (IPV4 only)
74+
Yes
Set the ECN to value (IPV4 only)
81+
Yes
Set the VLAN ID to value
82+
No
Table 7.2: Policing Actions
To set the DS value to 0 for out-of-profile packets and 20 for in-profile packets, use
action 74/5194
// 74+256*20=5194
To mirror only in-profile packets to port 3, use
action ok/838
// 70+256*3=838
u32 match selectors used in filters
A
u32
filter can specify multiple matches. The general form of a match is:
match {u32,u16,u8} <value> <mask> at <offset>
where
<value>
is a decimal or hexadecimal value preceded by
0x
,
<mask>
is always
hexadecimal with an optional
0x
, and
<offset>
is a decimal or hex value preceded by
0x
, it is
measured from the beginning of the layer 3 header or the beginning of the layer 2 header
depending on the protocol. The offset must be 32 bit aligned for a
u32
match, or 16 bit aligned
Ethernet Switch Blade User's Guide
release 3.2.2j
page 119
Downloaded from
www.Manualslib.com
manuals search engine
