Tcp Establish Bit (Access Control Lists Only); Fragments; Dscp; Operation - Avaya G250 Administration

Configuring policy

TCP Establish bit (access control lists only)

Use the tcp established command to specify that the rule only applies to packets that are
part of an established TCP session (a session in with the TCP ACK or RST flag is set). Use the
no form of this command to specify that the rule applies to all TCP packets. In either case, the
command also sets the IP protocol parameter to TCP.
The following command specifies that rule 6 in access control list 301 only matches packets that
are part of an established TCP session:
G350-001(ACL 301/ip rule 6)# tcp established

Fragments

To apply the rule to non-initial fragments, use the fragment command. You cannot use the
fragment command in a rule that includes UDP or TCP source or destination ports. For
example:
G350-001(super-ACL 301/ip rule 5)# fragment
Done!
G350-001(super-ACL 301/ip rule 5)#

DSCP

Use the dscp command, followed by a DSCP value (from 0 to 63) to apply the rule to all
packets with the specified DSCP value. Use the no form of the command to remove the rule
from the list.
The following command specifies that rule 5 in access control list 301 only matches packets in
which the DSCP value is set to 56:
G350-001(ACL 301/ip rule 5)# dscp 56

Operation

Use the operation command, followed by the name of a composite operation, to specify an
operation for the G250/G350 to perform on a packet when the packet matches the rule. For an
explanation of composite operations, see
The operation field for access control lists has a default value of Permit. See
composite operations for access control lists
The operation field for QoS lists has a default value of Trust-DSCP-CoS. See
composite operations for QoS lists
544 Administration for the Avaya G250 and Avaya G350 Media Gateways
Composite operations
on page 545.
on page 546.
on page 545.
Pre-configured
Pre-configured