Fragments; Dscp; Operation - Avaya G250 Administration

Configuring policy
The following command specifies that rule 6 in access control list 301 only matches packets that
are part of an established TCP session:
G350-001(ACL 301/ip rule 6)# tcp established

Fragments

To apply the rule to non-initial fragments, use the fragment command. You cannot use the
fragment command in a rule that includes UDP or TCP source or destination ports. For
example:
G350-001(super-ACL 301/ip rule 5)# fragment
Done!
G350-001(super-ACL 301/ip rule 5)#

DSCP

Use the dscp command, followed by a DSCP value (from 0 to 63) to apply the rule to all
packets with the specified DSCP value. Use the no form of the command to remove the rule
from the list.
The following command specifies that rule 5 in access control list 301 only matches packets in
which the DSCP value is set to 56:
G350-001(ACL 301/ip rule 5)# dscp 56

Operation

Use the operation command, followed by the name of a composite operation, to specify an
operation for the G250/G350 to perform on a packet when the packet matches the rule. For an
explanation of composite operations, see
The operation field for access control lists has a default value of Permit. See
composite operations for access control lists
The operation field for QoS lists has a default value of Trust-DSCP-CoS. See
composite operations for QoS lists
The following command specifies that rule 4 in access control list 302 drops packets that match
the rule, and causes the G250/G350 to send a trap and reset the connection when the packet is
dropped:
G350-001(ACL 304/ip rule 4)# operation Deny-Notify-Rst
Note:
Composite operation names are case-sensitive.
Note:
456 Administration for the Avaya G250 and Avaya G350 Media Gateways
Composite operations
on page 457.
on page 458.
on page 457.
Pre-configured
Pre-configured