policy
- traffic policy <txt>
- SDE
M10-Smart
M2
RS420
Traffic policy rule set
- Values
txt – Traffic policy rule set name
- Instances
Multiple
- traffic policy <txt> description <txt>
- SDE
M10-Smart
M2
RS420
- Values
txt – Traffic policy rule set description
- traffic policy <txt> rule <u32>
- SDE
M10-Smart
M2
RS420
Rule number (1-9999)
- Values
u32 – Rule number (1-9999)
- Instances
Multiple
- traffic policy <txt> rule <u32> action
- SDE
M10-Smart
M2
RS420
Action to perform on a packet on rule match (‘accept’ by default)
- Instances
Unique
- traffic policy <txt> rule <u32> action accept
- SDE
M10-Smart
M2
RS420
Accept packet
- traffic policy <txt> rule <u32> action continue
- SDE
M10-Smart
M2
RS420
Continue rules processing
- traffic policy <txt> rule <u32> action drop
- SDE
M10-Smart
M2
RS420
Drop packet
- traffic policy <txt> rule <u32> action enqueue <txt>
- SDE
M10-Smart
M2
RS420
Enqueue packet
- Reference
- traffic policy <txt> rule <u32> action rate-limit <float>
- SDE
M10-Smart
M2
RS420
Drop packet if bandwidth exceeds a limit
- Values
float – Rate in mbit per second (0.000001-30000)
- Instances
Multiple
- traffic policy <txt> rule <u32> action rate-limit <float> burst <id>
- SDE
M10-Smart
M2
RS420
Burst size
- Values
N[ms/mbit] – Burst in time (ms) or length (mbit)
- traffic policy <txt> rule <u32> copy
- SDE
M10-Smart
M2
RS420
Copy packet metadata
- Instances
Unique
- traffic policy <txt> rule <u32> copy connmark
- SDE
M10-Smart
M2
RS420
Copy connection tracking mark
- Instances
Unique
- traffic policy <txt> rule <u32> copy connmark extra-mark <int>
- SDE
M10-Smart
M2
RS420
To packet extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy connmark mark
- SDE
M10-Smart
M2
RS420
To packet mark
- traffic policy <txt> rule <u32> copy connmark tos
- SDE
M10-Smart
M2
RS420
To IPv4 TOS byte
- traffic policy <txt> rule <u32> copy extra-connmark <int>
- SDE
M10-Smart
M2
RS420
Copy connection tracking extra mark
- Values
int – Extra mark index (1-2)
- Instances
Unique
- traffic policy <txt> rule <u32> copy extra-connmark <int> extra-mark <int>
- SDE
M10-Smart
M2
RS420
To packet extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy extra-connmark <int> mark
- SDE
M10-Smart
M2
RS420
To packet mark
- traffic policy <txt> rule <u32> copy extra-connmark <int> tos
- SDE
M10-Smart
M2
RS420
To IPv4 TOS byte
- traffic policy <txt> rule <u32> copy extra-mark <int>
- SDE
M10-Smart
M2
RS420
Copy packet extra mark
- Values
int – Extra mark index (1-2)
- Instances
Unique
- traffic policy <txt> rule <u32> copy extra-mark <int> connmark
- SDE
M10-Smart
M2
RS420
To connection tracking mark
- traffic policy <txt> rule <u32> copy extra-mark <int> extra-connmark <int>
- SDE
M10-Smart
M2
RS420
To connection tracking extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy extra-mark <int> tos
- SDE
M10-Smart
M2
RS420
To IPv4 TOS byte
- traffic policy <txt> rule <u32> copy mark
- SDE
M10-Smart
M2
RS420
Copy packet mark
- traffic policy <txt> rule <u32> copy mark connmark
- SDE
M10-Smart
M2
RS420
To connection tracking mark
- traffic policy <txt> rule <u32> copy mark extra-connmark <int>
- SDE
M10-Smart
M2
RS420
To connection tracking extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy mark tos
- SDE
M10-Smart
M2
RS420
To IPv4 TOS byte
- traffic policy <txt> rule <u32> copy tos
- SDE
M10-Smart
M2
RS420
Copy IPv4 TOS byte
- Instances
Unique
- traffic policy <txt> rule <u32> copy tos connmark
- SDE
M10-Smart
M2
RS420
To connection tracking mark
- traffic policy <txt> rule <u32> copy tos extra-connmark <int>
- SDE
M10-Smart
M2
RS420
To connection tracking extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy tos extra-mark <int>
- SDE
M10-Smart
M2
RS420
To packet extra mark
- Values
int – Extra mark index (1-2)
- traffic policy <txt> rule <u32> copy tos mark
- SDE
M10-Smart
M2
RS420
To packet mark
- traffic policy <txt> rule <u32> description <txt>
- SDE
M10-Smart
M2
RS420
- Values
txt – Rule description
- traffic policy <txt> rule <u32> log
- SDE
M10-Smart
M2
RS420
Log packets matching rule
- traffic policy <txt> rule <u32> log level <txt>
- SDE
M10-Smart
M2
RS420
Specific log-level to use
- Values
emerg – Emergency messages
alert – Urgent messages
crit – Critical messages
err – Error messages
warn – Warning messages
notice – Messages for further investigation
info – Informational messages
debug – Debug messages
- traffic policy <txt> rule <u32> log prefix <txt>
- SDE
M10-Smart
M2
RS420
- Values
txt – Log message prefix text, up to 29 characters
- traffic policy <txt> rule <u32> selector <txt>
- SDE
M10-Smart
M2
RS420
IP traffic selector
- Reference
- traffic policy <txt> rule <u32> set
- SDE
M10-Smart
M2
RS420
Packet modifications
- traffic policy <txt> rule <u32> set app-id
- SDE
M10-Smart
M2
RS420
Connection tracking app-id
- Instances
Unique
- traffic policy <txt> rule <u32> set app-id custom <int>
- SDE
M10-Smart
M2
RS420
Selector ID for Classification Engine ID 6 (custom)
- Values
int – Selector ID to set (0-16777215)
- traffic policy <txt> rule <u32> set app-id engine <int>
- SDE
M10-Smart
M2
RS420
Classification Engine ID
- Values
int – Engine ID to set (1-255)
- Instances
Multiple
- Required
- traffic policy <txt> rule <u32> set app-id engine <int> selector <int>
- SDE
M10-Smart
M2
RS420
Selector ID for Classification Engine ID
- Values
int – Selector ID to set (0-16777215)
- traffic policy <txt> rule <u32> set app-id l3 <int>
- SDE
M10-Smart
M2
RS420
Selector ID for Classification Engine ID L3
- Values
int – Selector ID to set (1-16777215)
- traffic policy <txt> rule <u32> set app-id l4 <int>
- SDE
M10-Smart
M2
RS420
Selector ID for Classification Engine ID L4
- Values
int – Selector ID to set (1-16777215)
- traffic policy <txt> rule <u32> set connmark <int>
- SDE
M10-Smart
M2
RS420
Set connmark using a specific value
- Values
int – Packet marking (0-2147483647)
- traffic policy <txt> rule <u32> set dscp <int>
- SDE
M10-Smart
M2
RS420
Differentiated Services Code Point
- Values
int – DSCP (0-63)
- traffic policy <txt> rule <u32> set ecn <int>
- SDE
M10-Smart
M2
RS420
Explicit Congestion Notification
- Values
int – ECN (0-3)
- traffic policy <txt> rule <u32> set extra-mark <int>
- SDE
M10-Smart
M2
RS420
Packet extra marking
- Values
int – Extra mark index (1-2)
- Instances
Multiple
- traffic policy <txt> rule <u32> set extra-mark <int> value <int>
- SDE
M10-Smart
M2
RS420
Packet extra marking
- Values
int – Packet extra marking (0-2147483647)
- traffic policy <txt> rule <u32> set hoplimit <int>
- SDE
M10-Smart
M2
RS420
Hoplimit for IPv6 packets
- Values
int – Hoplimit (0-255)
- traffic policy <txt> rule <u32> set ipv6-dscp <int>
- SDE
M10-Smart
M2
RS420
Differentiated Services Code Point for IPv6 packets
- Values
int – DSCP (0-63)
- traffic policy <txt> rule <u32> set ipv6-ecn <int>
- SDE
M10-Smart
M2
RS420
Explicit Congestion Notification
- Values
int – ECN (0-3)
- traffic policy <txt> rule <u32> set label <id>
- SDE
M10-Smart
M2
RS420
Set a label into the packet
- Reference
- Instances
List of values
- traffic policy <txt> rule <u32> set mark <int>
- SDE
M10-Smart
M2
RS420
Packet marking
- Values
int – Packet marking (0-2147483647)
- Instances
Multiple
- traffic policy <txt> rule <u32> set mark <int> connmark-cache
- SDE
M10-Smart
M2
RS420
Enable connmark cache
- traffic policy <txt> rule <u32> set tcp-mss <int>
- SDE
M10-Smart
M2
RS420
Maximum segment size
- Values
int – “Segment size” (0-65535)
- traffic policy <txt> rule <u32> set tos <int>
- SDE
M10-Smart
M2
RS420
Type Of Service
- Values
int – TOS (0-255)
- traffic policy <txt> rule <u32> set ttl <int>
- SDE
M10-Smart
M2
RS420
Time to Live
- Values
int – TTL (0-255)
- traffic policy <txt> rule <u32> set vrf <id>
- SDE
M10-Smart
M2
RS420
Set mark using a VRF identifier
- Reference
- Instances
Multiple
- traffic policy <txt> rule <u32> set vrf <id> connmark-cache
- SDE
M10-Smart
M2
RS420
Enable connmark cache
- traffic policy <txt> rule <u32> set vrf-connmark <id>
- SDE
M10-Smart
M2
RS420
Set connmark using a VRF identifier
- Reference