- 360 -

7.21 Differentiated Service Command

!
This Switching Command function can only be used o n the QoS software version.
This chapter contains the CLI commands used for the QOS Differentiated Services (DiffSe rv) package.
The user configures DiffServ in several st ages by specifying:
1. Class
− creating and deleting classes
− defining match criteria for a class
!
The only way to remove an individual match criterion from an existing class definition is to
delete the class and re-create it.
2. Policy
− creating and deleting policies
− associating classes with a policy
− defining policy statements for a policy/class co mbination
3. Service
− adding and removing a policy to/from a directional (that is, inbound, outbound) interface
Packets are filtered and processed based on defined criteria. The f iltering criteria are define d by a class.
The processing is defined by a policy's a ttributes. Policy attributes may be defined on a per class instance
basis, and it is these attributes that are applied when a match occurs.
Packet processing begins by testing the match criteria for a packet. A policy is applied to a packet when a
class match within that policy is found.
Note that the type of class - all, any, or acl - has a bearing on the validity of match criteria specified when
defining the class. A class type of 'any' proce sses its match rules in an ordered sequence; additi onal rules
specified for such a class simply ext end this list. A class type of ‘acl’ obtains its rule list by interpreting
each ACL rule definition at the time the Diffserv class is created. Differences arise when specifying match
criteria for a class type 'all', since only one value for each non-excluded match field is allowed within a
class definition. If a field is already sp ecified for a clas s, all subsequent attempts to specify the same field
fail, including the cases where a field can be specified multiple ways through alternative formats. The
exception to this is when the 'exclude' option is specified, in which case this restriction does not apply to
the excluded fields.
The following class restricti ons are imposed by the FortiSwitch-548B Series L3 Switch DiffServ design:
• nested class support limited to: