Specifications

set security acl

Chapter 14

Security ACL Commands

464

precedence

Filters packets by precedence level. Specify a value

from 0 through 7:

• 0—routine precedence

• 1—priority precedence

• 2—immediate precedence

• 3—flash precedence

• 4—flash override precedence

• 5—critical precedence

• 6—internetwork control precedence

• 7—network control precedence

tos tos Filters packets by type of service (TOS) level. Specify

one of the following values, or any sum of these values

up to 15. For example, a tos value of 9 filters packets

with the TOS levels minimum delay (8) and minimum

monetary cost (1).

• 8—minimum delay

• 4—maximum throughput

• 2—maximum reliability

• 1—minimum monetary cost

• 0—normal

dscp codepoint Filters packets by Differentiated Services Code Point

(DSCP) value. You can specify a number from 0 to 63,

in decimal or binary format.

Note: You cannot use the dscp option along with the

precedence and tos options in the same ACE. The CLI

rejects an ACE that has this combination of options.

established For TCP packets only, applies the ACE only to

established TCP sessions and not to new TCP sessions.

before editbuffer-index Inserts the new ACE in front of another ACE in the

security ACL. Specify the number of the existing ACE

in the edit buffer. Index numbers start at 1. (To display

the edit buffer, use show security acl editbuffer.)