Enforcement; Default List Behavior; Policy And Load Balancing; P333R-Lb Policy Properties - Avaya P333R-LB Installation And Configuration Manual

Enforcement

P333R-LB can enforce policy rules on traffic addressed to its interfaces. This feature
enables you to block any configuration (e.g., SNMP, TELNET, and HTTP) of the
router/load balancer.

Default List Behavior

P333R-LB has a default list which is always active. The default list has one implicit
rule permitting all traffic to be forwarded. The DSCP table of the default list is
activated together with the default list, and includes the default DSCP-CoS
mappings.

Policy and Load Balancing

P333R-LB can enforce policy rules relating to Virtual IP addresses and to the
original Client IP. P333R-LB can not enforce policy rules relating to PIP addresses.
When a packet destined to a Virtual IP address is processed by P333R-LB, it checks
the packet against the active policy list before any NAT manipulation is performed
on the packet. Upon returning from the real servers, the packet is checked against
the active policy list after NAT was performed.

P333R-LB Policy Properties

P333R-LB supports QoS and Access Control rules pertaining to source IP addresses,
destination IP addresses, any IP protocol, any specific TCP/UDP port, and the ACK
bit of the TCP header. It also supports QoS rules on up to 3 port-ranges of TCP/
UDP.

Policy Configuration CLI Commands

In order to...
Display the DSCP-802.1p mapping
Activate a specific policy list
Deactivate a specific policy list
Set the default action for a specific
policy list
Set a name for a policy list
Set the owner for a specific policy
list
Avaya P333R-LB User's Guide
Chapter 12 Avaya P330 Layer 3 Features
Use the following command...
show dscp
ip access-group
no ip access-group
ip access-default-action
ip access-list-name
ip access-list-owner
109