Specifications

Policy Configuration Example
May 18, 2009 Page 30 of 32
Enable Enhanced Policy Capabilities on the Services N3 Platform
TheservicesN3platformsupportsenhancedpolicy.Thefollowingenhancedpolicycapabilities
areenabled:policyaccountingtoflagtheoccurrenceofarulehit,syslogruleusage setto
machine‐readableforenterprisespecificbackendsyslogstatisticsgathering,aninvalidactionset
todefaultpolicyshouldaninvalidpolicyoccur,TCI
overwriteenabledtoallowforTypeof
Service(ToS)overwritefortheVoIPphone.
ServicesN3(rw)->set policy accounting enable
ServicesN3(rw)->set policy syslog machine-readable
ServicesN3(rw)->set policy invalid action default-policy
ServicesN3(rw)->set port tcioverwrite ge.1.1-10
Configuring the Distribution Layer Role
Configuring the Policy Role
Thedistributionroleisconfiguredwith:
•Aprofile‐indexvalueof7
•Anameofdistribution
•AdefaultCoSwhennoruleoverridesCoS
•TCIoverwriteenabled
DistributionN5(rw)->set policy profile 7 name distribution cos-status enable cos
4 tci-overwrite enable
Assigning the Traffic Classification to the Policy Role
Assignportsge.1.1‐26tothedistributionpolicyrole,specifyingthe associatedports1‐26,enable
trapsandenablesyslog.
DistributionN5(rw)->set policy rule admin-profile port ge.1.1-26 admin-pid 7
port-string ge.1.1-26 trap enable syslog enable.
Assigning Traffic Classification Rules
AssignaCoStodistributionupanddownstreamlinkports,rate‐limitingthetrafficto25M.
DistributionN5(rw)->set policy rule 7 port ge.1.1-26 cos 11
DistributionN5(rw)->set policy rule 7 port ge.2.1-26 cos 11
Enable Enhanced Policy Capabilities on the Distribution N5 Platform
TheservicesN5platformsupportsenhancedpolicy.Thefollowingenhancedpolicycapabilities
areenabled:policyaccountingtoflagtheoccurrenceofarulehit,syslogruleusage setto
machine‐readableforbackendsyslogstatisticsgathering,aninvalidactionsettodefaultpolicy
shouldaninvalidpolicyoccur,TCIoverwriteenabled
toallow forTypeofService(ToS)overwrite
fortheVoIPphone.
ServicesN3(rw)->set policy accounting enable
ServicesN3(rw)->set policy syslog machine-readable
ServicesN3(rw)->set policy invalid action default-policy
ServicesN3(rw)->set port tcioverwrite ge.1.1-26
ServicesN3(rw)->set port tcioverwrite ge.2.1-26
Thiscompletesthepolicyconfigurationforthisschoolexample.