Specifications

Assigning Classification Rules to Policy Profiles set policy rule
8-20 Policy Classification Configuration
Examples
ThisexampleshowshowtouseTable 8‐3tocreate(andenable)aVLANclassificationruleto
policy2,classification65,todroppacketsfromasourceIPaddressof172.16.1.2:
Matrix(rw)->set policy classify 2 65 vlan drop ipsource 172.16.1.2
set policy rule
UsethiscommandtoassignincominguntaggedframestoaspecificpolicyprofileandtoVLANor
Class‐of‐Serviceclassificationrules.
Syntax
set policy rule admin-profile | profile-index {ether | ipfrag | ipproto | ipdest
| ipsource | iptos | llcDsapSsap | macdest | macsource | | port | tcpdestport |
tcpsourceport | udpdestport | udpsourceport} data [mask mask] [port-string port-
string] [storage-type {non-volatile | volatile}] [vlan vlan] | [drop | forward]
[admin-pid admin-pid] [cos cos]
Parameters
admin‐profile|
profile‐index
Specifiesthatthisisanadministrativeruleorassociatesthis
classificationrulewithapolicy profileindex configuredwiththeset
policyprofilecommand(“setpolicyprofile”onpage 8‐4).Validprofile‐
indexvaluesare1‐1023.
Note: Admin profiles can be assigned to a specific ingress port by specifying
port-string and admin-pid values as described below.
ether ClassifiesbasedontypefieldinEthernetIIpacket.
ipdest ClassifiesbasedondestinationIPaddress.
ipfrag ClassifiesbasedonIPfragmentationvalue.
ipproto ClassifiesbasedonprotocolfieldinIPpacket.
ipsource ClassifiesbasedonsourceIPaddress.
iptos ClassifiesbasedonTypeofServicefieldinIPpacket.
llcDsapSsap ClassifiesbasedonDSAP/SSAP
pairin802.3typepacket.
macdest ClassifiesbasedonMACdestinationaddress.
macsource ClassifiesbasedonMACsourceaddress.
port Classifiesbasedonport‐string.
tcpdestport ClassifiesbasedonTCPdestinationportwith.
tcpsourceport ClassifiesbasedonTCPsourceport.
udpdestport ClassifiesbasedonUDPdestinationport.
udpsourceport ClassifiesbasedonUDPsourceport
.
data (Notrequiredforipfragclassification.)Specifiesthecodefora
predefinedclassifier.Thisvalueisdependentontheclassificationtype
entered.RefertoTable 8‐3forvalidvaluesforeachclassificationtype.
maskmask (Optional)Specifiesthenumberofsignificantbitstomatch,dependent
onthedatavalueentered.Refer
toTable 8‐3forvalidvaluesforeach
classificationtypeanddatavalue.