Classifying Packets Based on Services

[Contents] [Prev] [Next] [Index] [Report an Error]

On Adaptive Services (AS) PICs, there is an additional method of classifying traffic flows based on applications, such as stateful firewalls and network address translation (NAT).

This method allows you to configure a rule-based service that provides DiffServ code point (DSCP) marking and forwarding-class assignments for traffic transiting the AS PIC. The service enables you to specify matching by application, application set, source, destination address, and match direction, and uses a similar structure to other rule-based services such as stateful firewall. The service actions allow you to associate the DSCP alias or value, forwarding-class name, system log activity, or a preconfigured application profile with the matched packet flows.

To configure class-of-service (CoS) features on the Adaptive Services PIC, include the cos statement at the [edit services] hierarchy level:



[edit services]
cos {



application-profile profile-name {



sip-text {

dscp (alias | bits);

forwarding-class class-name;
}





sip-video {

dscp (alias | bits);

forwarding-class class-name;
}





sip-voice {

dscp (alias | bits);

forwarding-class class-name;
}


}





rule rule-name {

match-direction (input | output | input-output);



term term-name {



from {

applications [ application-names ];

application-sets [ set-names ];

destination-address address;

source-address address;
}





then {

application-profile profile-name;

dscp (alias | bits);

forwarding-class class-name;

syslog;



(reflexive | reverse) {

application-profile profile-name;

dscp (alias | bits);

forwarding-class class-name;

syslog;
}


}


}


}





rule-set rule-set-name {
[ rule rule-names ];
}


}

This chapter contains the following sections:

[Contents] [Prev] [Next] [Index] [Report an Error]