Diffserv Policy Configuration

Use the Diffserv Policy Configuration page to add or remove a DiffServ policy-class association and to configure the policy attributes. The policy attributes identify the action or actions taken when a packet matches a class rule.

After you select the policy to configure from the Policy menu, use the buttons to perform the following tasks:

To add a class to the policy, click Add Class.
To add attributes to a policy or to change the policy attributes, select the policy with the attributes to configure and click Add Attribute.
To remove the most recently associated class from the selected policy, click Remove Last Class.

To access this page, click QoS > Diffserv > Policy Configuration in the navigation menu.

Diffserv Policy Configuration Fields

Field	Description
Policy	The name of the policy. To add a class to the policy, remove a class from the policy, or configure the policy attributes, you must first select its name from the menu.
Type	The traffic flow direction to which the policy is applied.
Class	The DiffServ class or classes associated with the policy. The policy is applied to a packet when a class match within that policy-class is found.
Policy Attribute Details	The policy attribute types and their associated values that are configured for the policy.
Assign Queue	Select this option to assign matching packets to a traffic queue. Use the Queue ID Value field to select the queue to which the packets of this policy-class are assigned.
Drop	Select this option to drop packets that match the policy-class.
Mark CoS (Class of Service)	Select this option to mark all packets in a traffic stream with the specified Class of Service (CoS) queue value. Use the Class of Service field to select the CoS value to mark in the priority field of the 802.1p header (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). If the packet does not already contain this header, one is inserted.
Mark Secondary CoS	Select this option to mark all packets in a traffic steam with the specified secondary CoS queue number. Use the Class of Service field to select the CoS value to mark in the priority field of the 802.1p header in the secondary (inner) 802.1Q tag of a double VLAN tagged packet. If the packet does not already contain this header, one is inserted.
Mark IP DSCP	Select this option to mark all packets in the associated traffic stream with the specified IP DSCP value. After you select this option, use one of the following fields to configure the IP DSCP value to mark in packets that match the policy-class: IP DSCP Keyword: The IP DSCP keyword code that corresponds to the IP DSCP value. If you select a keyword, you cannot configure an IP DSCP Value. IP DSCP Value: The IP DSCP value.
Mark IP Precedence	Select this option to mark all packets in the associated traffic stream with the specified IP Precedence value. After you select this option, use the IP Precedence Value field to select the IP Precedence value to mark in packets that match the policy-class.
Mirror Interface	Select this option to copy the traffic stream to a specified egress port (physical or LAG (Link Aggregation Group)) without bypassing normal packet forwarding. This action can occur in addition to any marking or policing action. It may also be specified along with a QoS (Quality of Service) queue assignment. Use the Interface menu to select the interface to which traffic is mirrored.
Police Simple	Select this option to enable the simple traffic policing style for the policy-class. The simple form of the police attribute uses a single data rate and burst size, resulting in two outcomes (conform and violate). After you select this option, configure the following policing criteria: Color Mode: The type of color policing used in DiffServ traffic conditioning. Color Conform Class: For color-aware policing, packets in this class are metered against both the committed information rate (CIR) and the peak information rate (PIR). The class definition used for policing color awareness is only allowed to contain a single, non-excluded class match condition identifying one of the supported comparison fields: CoS, IP DSCP, IP Precedence, or Secondary COS. Committed Rate (Kbps): The maximum allowed arrival rate of incoming packets for this class. Committed Burst Size (Kbytes): The amount of conforming traffic allowed in a burst. Conform Action: The action taken on packets that are considered conforming (below the police rate). Violate Action: The action taken on packets that are considered non-conforming (above the police rate).
Police Single Rate	Select this option to enable the single-rate traffic policing style for the policy-class. The single-rate form of the police attribute uses a single data rate and two burst sizes, resulting in three outcomes (conform, exceed, and violate). After you select this option, configure the following policing criteria: Color Mode: The type of color policing used in DiffServ traffic conditioning. Color Conform Class: For color-aware policing, packets are metered against the committed information rate (CIR) and the peak information rate (PIR). The class definition used for policing color awareness is only allowed to contain a single, non-excluded class match condition identifying one of the supported comparison fields: CoS, IP DSCP, IP Precedence, or Secondary COS. This field is available only if one or more classes that meets the color-awareness criteria exist. Color Exceed Class: For color-aware policing, packets are metered against the PIR only. Committed Rate (Kbps): The maximum allowed arrival rate of incoming packets for this class. Committed Burst Size (Kbytes): The amount of conforming traffic allowed in a burst. Excess Burst Size (Kbytes): The amount of conforming traffic allowed to accumulate beyond the Committed Burst Size (Kbytes) value during longer-than-normal idle times. This value allows for occasional bursting. Conform Action: The action taken on packets that are considered conforming (below the police rate). Exceed Action: The action taken on packets that are considered to exceed the committed burst size but are within the excessive burst size. Violate Action: The action taken on packets that are considered non-conforming (above the police rate).
Police Two Rate	Select this option to enable the two-rate traffic policing style for the policy-class. The two-rate form of the police attribute uses two data rates and two burst sizes. Only the smaller of the two data rates is intended to be guaranteed. After you select this option, configure the following policing criteria: Color Mode: The type of color policing used in DiffServ traffic conditioning. Color Conform Class: For color-aware policing, packets are metered against the committed information rate (CIR) and the peak information rate (PIR). The class definition used for policing color awareness is only allowed to contain a single, non-excluded class match condition identifying one of the supported comparison fields: CoS, IP DSCP, IP Precedence, or Secondary COS. This field is available only if one or more classes that meets the color-awareness criteria exist. Color Exceed Class: For color-aware policing, packets are metered against the PIR. Committed Rate (Kbps): The maximum allowed arrival rate of incoming packets for this class. Committed Burst Size (Kbytes): The amount of conforming traffic allowed in a burst. Peak Rate (Kbps): The maximum peak information rate for the arrival of incoming packets for this class. Excess Burst Size (Kbytes): The maximum size of the packet burst that can be accepted to maintain the Peak Rate (Kbps). Conform Action: The action taken on packets that are considered conforming (below the police rate). Exceed Action: The action taken on packets that are considered to exceed the committed burst size but are within the excessive burst size. Violate Action: The action taken on packets that are considered non-conforming (above the police rate).
Redirect Interface	Select this option to force a classified traffic stream to the specified egress port (physical port or LAG). Use the Interface field to select the interface to which traffic is redirected.