Configuring Policy Role Traffic Classification Precedence (S-, K-Series)

Each policy role has a precedence list associated with it that determines the order in which classification rules are applied to a packet. The higher the placement of the classification rule attribute in the list, the higher the precedence value of that attribute when applying classification rules.

All classification rule attributes supported by the platform have a static numeric ID value and are members of a precedence list. See Administrative Policy and Policy Rule Traffic Classifications for a listing of classification rule attributes and their associated attribute ID values in the default order of precedence.

Use the show policy profile command to display the current precedence list associated with a policy role.

By default, the precedence list is made up of attribute values 1-31 (with the exception that attribute value 29 is out of order), with unsupported ID values not specified. The precedence list associated with a given role can be modified using the precedence option in the set policy profile command. The following S- K- and 7100-Series example sets the port (31) attribute to the highest precedence and leaves the remaining attributes in the default ordering:

System(rw)->set policy profile 200 precedence 31,1-2,29,3-8,12-19,21-22,25-28,9-11,23,20
System(rw)->show policy profile 200
Profile Index           :200
Profile Name            : 
.
.
.
Rule Precedence         :31,1-2,29,3-8,12-19,21-22,25-28,9-11,23,20
                        :Port (31), MACSource (1), MACDest (2),
                        :Application (29), IPXSource (3), IPXDest (4),
                        :IPXSrcSocket (5), IPXDstSocket (6), IPXClass (7),
                        :IPXType (8), IPSource (12), IPDest (13), IPFrag (14),
                        :UDPSrcPort (15), UDPDestPort (16), TCPSrcPort (17),
                        :TCPDestPort (18), ICMPType (19), IPTOS (21),
                        :IPProto (22), Ether (25), LLCDSAPSSAP (26),
                        :VLANTag (27), TCI (28), IPv6Source (9),
                        :IPv6Dest (10), IPv6Flow (11), ICMP6Type (23),
                        :TTL (20)
.
.
.
System(rw)->