Extreme Networks ExtremeWare XOS Guide Manual page 265

Concepts guide
Hide thumbs Also See for ExtremeWare XOS Guide:
Table of Contents

Advertisement

example, DiffServ replacement is configured such that QP8 is mapped to code point 56. Matching
packets are sent to QP8, and the DSCP value in the packet is set to 56:
entry voice_entry {
if {
source-address 2.2.2.2/32;
} then {
qosprofile qp8;
replace-dscp;
}
}
See
Chapter
15,
"Quality of
replacement.
Syntax Details
Table 34
lists the match conditions that can be used with ACLs, and whether the condition can be used
for ingress ACLs only, or with both ingress and egress. The conditions are case-insensitive; for example,
the match condition listed in the table as
are five different data types used in matching packets.
them.
Table 34: ACL match conditions
Match Conditions
ethernet-type <number>
ethernet-source-address
<mac-address>
ethernet-destination-address
<mac-address>
source-address <prefix>
destination-address <prefix>
protocol <number>
fragments
first-fragments
Source-port {<number> |
<range>}
ExtremeWare XOS 11.3 Concepts Guide
Service," for more details about QoS profiles, and 802.1p and DSCP
TCP-flags
Description
Ethernet packet type. In place of the numeric value, you can
specify one of the following text synonyms (the field values are
also listed): ETHER-P-IP (0x0800), ETHER-P-8021Q (0x8100),
ETHER-P-IPV6 (0x86DD)
Ethernet source MAC address
Ethernet destination MAC address
IP source address and mask. Egress ACLs do not support IPv6
addresses, only IPv4 addresses. Use either all IPv4 or all IPv6
1
addresses in an ACL.
IP destination address and mask. Egress ACLs do not support
IPv6 addresses, only IPv4 addresses. Use either all IPv4 or all
IPv6 addresses in an ACL.
IP protocol field. In place of the numeric value, you can specify
one of the following text synonyms (the field values are also
listed): egp(8), esp(5), gre(47), icmp(1), igmp(2), ipip(4),
ipv6(41), ospf(89), pim(102), rsvp(46), tcp(6), or udp(17)
BlackDiamond 10K only—IP fragmented packet. FO > 0 (FO =
Fragment Offset in IP header)
Non-IP fragmented packet or first fragmented packet. FO==0.
TCP or UDP source port. In place of the numeric value, you can
specify one of the text synonyms listed under destination port.
can also be written as
tcp-flags
Table 35
lists the data types and details on using
1
ACLs
. Within
Table 34
Applicable
IP Protocols/
Direction
Ethernet/
Ingress only
Ethernet/
Ingress only
Ethernet/
Ingress only
All IP/
Ingress and
Egress
All IP/
Ingress and
Egress
All IP/
Ingress and
Egress
All IP, no L4
rules/Ingress
only
All IP/
Ingress only
TCP, UDP/
Ingress and
Egress
265

Advertisement

Table of Contents
loading

This manual is also suitable for:

Extremeware xos 11.3

Table of Contents