Table of Contents
Advertisement
Administrator's Handbook
set diffserv custom-flows name name
protocol [ TCP | UDP | ICMP | other ]
direction [ outbound | inbound | both ]
start-port [ 0 - 65535 ]
end-port [ 0 - 65535 ]
inside-ip inside-ip-addr
inside-ip-mask inside-ip-netmask
outside-ip outside-ip-addr
outside-ip-mask outside-ip-netmask
qos [ off | assure | expedite | network-control ]
Defines or edits a custom flow. Select a name for the custom-flow from the set command. The CLI will
step into the newly-named or previously-defined flow for editing.
K protocol – Allows you to choose the IP protocol for the stream: TCP, UDP, ICMP, or other.
other is appropriate for setting up flows on protocols with non-standard port definitions, for exam-
ple, IPSEC or PPTP. If you select other, an additional field, numbered-protocol will appear with a
range of 0–255. Choose the protocol number from this field.
K direction – Allows you to choose whether to apply the marking and gateway queue behavior for
inbound packets, outbound packets, or to both. If the Gateway is used as an "edge" gateway, its
more important function is to mark the packets for high-priority streams in the outbound direction.
K start-port/end-port – Allows you to specify a range of ports to check for a particular flow, if the pro-
tocol selection is TCP or UDP.
K inside-ip/mask – If you want packets originating from a certain LAN IP address to be marked, enter
the IP address and subnet mask here. If you leave the address equal to zero, this check is ignored
for outbound packets. The check is always ignored for inbound packets. The DiffServe queuing func-
tion must be applied ahead of NAT; and, before NAT re-maps the inbound packets, all inbound pack-
ets are destined for the Gateway's WAN IP address.
K outside-ip/mask – If you want packets destined for and originating from a certain WAN IP address
to be marked, enter this address and subnet mask here. If you leave the address equal to zero, the
outside address check is ignored. For outbound flows, the outside address is the destination IP
address for the packets. For inbound packets, the outside address is the source IP address for the
packets.
Note:
When setting the Inside/Outside IP Address/Netmask settings, note that a netmask value can be
used to configure for a network rather than a single IP address.
K qos – Allows you to specify the Quality of Service for the flow: off, assure, expedite or network-
control. These are used both to mark the IP TOS byte and to distribute packets into the queues as
if they were marked by the source.
QoS Setting
Off
Assure
Expedite
Network Control
174
TOS Bit Value
TOS=000
This custom flow is disabled. You can activate it by selecting one
of the two settings below. This setting allows you to pre-define
flows without actually activating them.
TOS=001
Use normal queuing and throughput rules, but do not drop pack-
ets if possible. Appropriate for applications with no guaranteed
delivery mechanism.
TOS=101
Use minimum delay. Appropriate for VoIP and video applications.
TOS=111
Use highest possible priority.
Behavior
Advertisement
Table of Contents
