Patton electronic 2800 user manual Creating a service policy profile, Nodecfg#profile acl name

OnSite 2800 Series User Manual8 • Link scheduler configuration

Mode: Configure

Step	Command	Purpose
1	node(cfg)#profile acl name	Creates a new access
		control list profile named
		name
2	node(pf-acl)[name]#permit ip host ip-address any traffic-class	Creates an IP access con-
	class-name	trol list entry that permits
		access for host at IP
		address ip-address, and
		specifies that packets
		matched by this rule
		belong to the traffic-class
		class-name.
3	node(pf-acl)[name]#permit ip any any	Creates an IP access con-
		trol list entry that permits
		IP traffic to or from all IP
		addresses.

Example: Defining the access control list profile

In the example below a new access control list profile named Webserver is created. In addition an IP access con- trol list entry that permits access for host at IP address 172.16.1.20, and specifies that packets matched by this rule belong to the traffic-class Web is added. Finally an IP access control list entry that permits IP traffic to or from all IP addresses is added to the access control list.

2800(cfg)#profile acl Webserver

2800(pf-acl)[Webserv~]#permit ip host 172.16.1.20 any traffic-class Web 2800(pf-acl)[Webserv~]#permit ip any any

After packet classification is done using access control lists, the link arbiter needs rules defining how to handle the different traffic-classes. For that purpose you create a service-policy profile. The service policy profile defines how the link arbiter has to share the available bandwidth among several traffic classes on a certain interface.

Creating a service policy profile

The service-policy profile defines how the link scheduler should handle different traffic-classes. The overall structure of the profile is as follows:

Link scheduler configuration task list 102