set policy rule (S-, K-Series)

Examples

This example shows how to use Valid Values for Policy Classification Rules to create (and enable) a classification rule to associate with policy number 1. This rule will filter Ethernet II Type 1526 frames to VLAN 7:

System(rw)->set policy rule 1 ether 1526 vlan 7

This example shows how to use Valid Values for Policy Classification Rules to create (and enable) a classification rule to associate with policy profile number 5. This rule specifies that UDP frames from source port 45 will be filtered to VLAN 7:

System(rw)->set policy rule 5 udpportsourceip 45 vlan 7

This example shows how to configure classification rule 2 as an administrative profile and assign it to ingress port ge.1.1:

System(rw)->set policy rule admin-profile port ge.1.1 port-string ge.1.1 admin-pid 2

This example shows how to classify all Ethernet II Type 1526 frames to administrative policy profile 2:

System(rw)->set policy rule admin-profile ether 1526 admin-pid 2

Valid Values for Policy Classification Rules provides the set policy rule data values that can be entered for a particular classification type, and the mask bits that can be entered for each classifier associated with that parameter.

Valid Values for Policy Classification Rules

Classification Rule Parameter	data value	mask bits
application	{llmnr| ssdp | mdns-sd} {query | response}	Not applicable.
ether	Type field in Ethernet II packet: 1536 - 65535	1- 16
icmptype	ICMP Type: a.b	1- 16
Destination or Source IP Address: ipdestsocket ipsourcesocket	IP Address in dotted decimal format: 000.000.000.000 and (Optional) post-fixed port: 0 - 65535	1 - 48
ipfrag	Not applicable.	Not applicable.
ipproto	Protocol field in IP packet: 0 - 255	1- 8
iptos	Type of Service field in IP packet: 0 - 255	1- 8
ipttl	Time-to-live (TTL) in IP packet: 0 - 255	1 - 8
ipxclass	Transmission control (Class of Service) field in IPX: 0 - 255	1- 8
Destination or Source IPX Network: ipxdest ipxsource	IPX Address: 0 - 0xffffffff	1 - 32
Destination or Source IPX Socket: ipxdestsocket ipxsourcesocket	IPX Socket Number: 0 - 65535	1 - 16
ipxtype	IPX packet type field: 0 - 255	1 - 8
llcDsapSsap	DSAP/SSAP/CTRL field in llc: a-b-c-ab	1 - 40
Destination or Source MAC: macdest macsource	MAC Address: 00-00-00-00-00-00	1 - 48
port	Port string: Eg. ge.1.1	1 - 16
tci	Tag Control Information: 0 - 65535 or 0xFFFF	1 - 16
Destination or Source TCP port: tcpdestportip tcpsourceportip	TCP Port Number with optional post-fix IP address: ab[:c.d.e.f] 0-65535:1.1.1.1; or 0-0xFFFF:1.1.1.1	1 - 48
Destination or Source UDP port: udpsourceportip udpdestportip	UDP Port Number with optional post-fix IP address: ab[:c.d.e.f] 0-65535:1.1.1.1; or 0-0xFFFF:1.1.1.1	1 - 48
vlantag	VLAN tag: 1- 4094	1 -12