Multifield classifiers take action on incoming or outgoing packets, depending whether the firewall rule is applied as an input filter or an output filter. When TCM is enabled, T-series and M320 platforms support four multifield classifier PLP designations: low, medium-low, medium-high, and high.
To configure the PLP for a multifield classifier, include the loss-priority statement in a policer or firewall filter that you configure at the at the [edit firewall] hierarchy level:
- [edit firewall]
- family family-name {
-
- filter filter-name {
-
- term term-name {
-
- from {
-
match-conditions;
- }
-
- then {
- loss-priority (low | medium-low | medium-high | high);
- forwarding-class class-name;
- }
- }
- }
- }
The inputs (match conditions) for a multifield classifier are one or more of the six packet header fields: destination address, source address, IP protocol, source port, destination port, and DSCP. The outputs for a multifield classifier are the forwarding class and the loss priority (PLP). In other words, a multifield classifier sets the forwarding class and the PLP for each packet entering or exiting the interface with a specific destination address, source address, IP protocol, source port, destination port, or DSCP.
For example, in the following configuration, the forwarding class expedited-forwarding and PLP medium-high are assigned to all IPv4 packets with the 10.1.1.0/24 or 10.1.2.0/24 source address:
- firewall {
-
- family inet {
-
- filter classify-customers {
-
- term isp1-customers {
-
- from {
- source-address 10.1.1.0/24;
- source-address 10.1.2.0/24;
- }
-
- then {
- loss-priority medium-high;
- forwarding-class expedited-forwarding;
- }
- }
- }
- }
- }
To use this classifier, you must configure the settings for the expedited-forwarding forwarding class at the [edit class-of-service forwarding-classes queue queue-number expedited-forwarding] hierarchy level. For more information, see Configuring Forwarding Classes.