.. _example_traffic_policy_policy:

######
Policy
######


.. sidebar:: Contents

  .. contents::
    :depth: 2
    :local:

The following scenarios show how to configure different
``traffic policies``. Policies can be used to manage and
classify network packets. ``traffic selectors`` can be
configured to filter packets based on certain fields.

.. image:: topology.svg
  :width: 400

*******************
Test Policy Actions
*******************

Description
===========

In this scenario, an ingress ``traffic policy`` is configured
in DUT0 ('eth0' interface). Different traffic actions are
configured to accept, drop or limit incoming traffic.

Scenario
========

.. include:: policy/testpolicyactions

.. raw:: html

  <hr>

****************
Test Policy Copy
****************

Description
===========

In this scenario, an ingress ``traffic policy`` is configured
in DUT0 ('eth0' interface). Different ``copy`` actions are
configured to store the ToS value in the ``conntrack mark``
and ``extra conntrack mark`` fields.

Scenario
========

.. include:: policy/testpolicycopy

.. raw:: html

  <hr>

***************
Test Policy Set
***************

Description
===========

In this scenario, an egress ``traffic policy`` is configured
in DUT0 ('eth0' interface) to mark outgoing packets
using ToS and CoS fields.

Scenario
========

.. include:: policy/testpolicyset

.. raw:: html

  <hr>

********************************
Test Policy Set Conntrack Values
********************************

Description
===========

In this scenario, an ingress ``traffic policy`` is configured
in DUT0 ('eth0' interface). Different ``set`` actions are
configured to change the conntrack mark, the app-id and the
VRF.

Scenario
========

.. include:: policy/testpolicysetconntrackvalues

.. raw:: html

  <hr>

***************
Test Policy Log
***************

Description
===========

In this scenario, an ingress ``traffic policy`` is configured
in DUT0 ('eth0' interface). The ``log`` option is configured to
show system messages that help debug and analyze the
network status.

Scenario
========

.. include:: policy/testpolicylog

.. raw:: html

  <hr>

*******************
Test Policy Advisor
*******************

Description
===========

In this scenario, an ingress ``traffic policy`` is configured
in DUT0 ('eth0' interface). The ``advisor`` option is
configured to enable/disable the rule depending on
the advisor status. If the rule is enabled, incoming traffic
will be dropped.

Scenario
========

.. include:: policy/testpolicyadvisor

.. raw:: html

  <hr>