Creating A Service Policy Profile - Patton electronics SmartNode Series Software Configuration Manual

SmartWare Software Configuration Guide
Mode: Configure
Step
node (cfg)#profile acl name
1
node (pf-acl)[ name ]#permit ip host ip-address any traffic-class
2
class-name
node (pf-acl)[ name ]#permit ip any any
3
Example: Defining the access control list profile
In the example below a new access control list profile named Webserver is created. In addition an IP access con-
trol list entry that permits access for host at IP address 172.16.1.20, and specifies that packets matched by this
rule belong to the traffic-class Web is added. Finally an IP access control list entry that permits IP traffic to or
from all IP addresses is added to the access control list.
node(cfg)#profile acl Webserver
node(pf-acl)[Webserv~]#permit ip host 172.16.1.20 any traffic-class Web
node(pf-acl)[Webserv~]#permit ip any any
After packet classification is done using access control lists, the link arbiter needs rules defining how to handle the
different traffic-classes. For that purpose you create a service-policy profile. The service policy profile defines how
the link arbiter has to share the available bandwidth among several traffic classes on a certain interface.
Creating a service policy profile
The service-policy profile defines how the link scheduler should handle different traffic-classes. The overall
structure of the profile is as follows:
Link scheduler configuration task list
Command
13 • Link scheduler configuration
Purpose
Creates a new access
control list profile named
name
Creates an IP access con-
trol list entry that permits
access for host at IP
address ip-address , and
specifies that packets
matched by this rule
belong to the traffic-class
class-name .
Creates an IP access con-
trol list entry that permits
IP traffic to or from all IP
addresses.
150