HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 358

Setting Up Quality of Service
Marking Packets with a ToS value
7-46
You select the traffic to be marked by matching the QoS map entry to an
extended ACL. The ACL actually selects the traffic. An extended ACL can
define traffic according to its source and destination IP address as well as a
variety of fields in the IP, TCP, or UDP header. You also use extended ACLs to
mark traffic destined to a specific TCP or UDP protocol port.
To mark traffic selected by an ACL, you must complete several steps:
1. Configure an ACL.
a. Create an extended ACL.
b. Add any necessary deny entries to the ACL.
c. Add permit entries for the addresses to or from which you want to
mark traffic.
2. Match the QoS map entry to the ACL.
Configuring an ACL. Create an extended ACL by entering this command
from the global configuration mode context:
Syntax: ip access-list extended <listname>
For example:
ProCurve(config)# ip access-list extended PacketMarker
You can select a range of addresses in an ACL. You can also select certain types
of traffic by specifying source or destination protocol port.
For example, you can mark all traffic destined to TCP port 1720 with a
ToS value:
ProCurve(config-ext-nacl)# permit tcp any any eq 1720
For the complete command syntax and more information about configuring
ACLs, see "Classifying Traffic According to IP Header Fields" on page 7-22 or
Chapter 5: Applying Access Control to Router Interfaces.
Matching a QoS Map Entry to an ACL. Move to the configuration mode
context for the QoS map entry you have created. Then enter this command:
Syntax: match list <ACL listname>
For example:
ProCurve(config-qos-map)# match list PacketMarker
To actually select the IP precedence value, you must enter a set command.
See "Setting the ToS Value" on page 7-48.