Packet Filtering
Issue 4 May 2005 195
6. From the Action drop-down list, select Permit to activate the QoS Mark drop-down list.
Note:
Note: As you build your Packet Marking Rule, its parameters populate the “Filtering
Policy in Progress” text box, which is located at the bottom of the wizard.
7. From the QoS Mark drop-down list, do one of the following.
Select Inherit if you want the VSU to examine the ToS field of packets entering the VSU,
then copy the QoS mark to the ToS field of the payload packet header (exiting the VPN
tunnel) or the VPN packet header (entering the tunnel). Which packet depends on the
rule being created.
Note:
Note: If you do one of the following, assure that the mark used for the rule matches the
mark configured in your router(s).
Select User Defined if you want to activate the User Defined text box, then type a
specific mark into the box. The mark must be a number from 0 to 63.
Select a specific CS mark if you want to use a predefined Class Selector mark. Although
the specific CS mark used must be the same as the one configured in your router(s),
these marks serve as a backward compatibility mechanism for IP Precedence Marks ,
which predate modern QoS Marks.
Select a specific AF mark if you want to use a predefined Assured Forwarding mark. The
AF mark identifies which level of precedence the packet must be dropped from the
stream if traffic congestion limits are exceeded.
Select the EF mark if your router(s) are marking packets with the predefined Expedited
Forwarding mark. The EF mark assures that a packet does not get promoted or demoted
to a specific packet forwarding behavior.
8. Continue to use the Packet Filtering Policy Wizard to define the remaining parameters of
your packet marking rule. Some of the parameters are listed in Table 14 the table. Packets
which match the values of these parameters get their ToS fi eld changed to the QoS Mark
selected in Step 7.
Table 14: Parameters used in a Packet Marking Rule
Parameter Description
Traffic Type Use the Tra ff i c Ty pe controls to configure
which IP protocol the rule must contain.
Source
Address Use the From Where controls to configure
which source address the rule must
contain.
1 of 2