ip policy-access-list (S-, K-Series)

Use this command to apply policy access list actions to a VRF.

Syntax

ip policy-access-list {access-list-number | name}
no ip policy-access-list {access-list-number | name}

Parameters

access-list-number | name Specifies the number or name of the policy access list to be applied to the VRF. This is either a decimal number from 1 to 199 or a alpha-numeric text name of up to 64 characters.

Defaults

None.

Mode

Global configuration.

Usage

Policy ACLs are applied in the VRF global configuration mode. The application of a single policy ACL per VRF is supported. An ACL can be applied before it is created. The uncreated applied ACL will have no affect.

Neither the creation nor application of a policy ACL persists after a system reset.

The “no” form of this command removes the specified access list.

Example

This example shows how to apply policy access list 100 to the global VRF. Through the definition of access list 100, only frames with source 192.5.34.0 will have the DSCP value set or reset to 46. All other frames are forwarded without change unless restricted by another ACL:

System(rw-config)->access-list policy 100 
System(rw-cfg-policy-acl-100)->permit ip host 192.5.34.0 any set-dscp 46
System(rw-cfg-policy-acl-100)->exit
System(rw-config)->ip policy-access-list 100