qos

qos
+  classifiers
   +  dot1p-policy name string 
      +  dot1p value number 
         +  drop-probability keyword
         +  forwarding-class (reference | keyword)
   +  dscp-policy name string 
      +  dscp value number 
         +  drop-probability keyword
         +  forwarding-class (reference | keyword)
   +  mpls-traffic-class-policy name string 
      +  traffic-class value number 
         +  drop-probability keyword
         +  forwarding-class (reference | keyword)
   +  multifield
      +  ipv4-policy name string 
         +  entry sequence-id number 
            +  action
               +  drop-probability keyword
               +  forwarding-class (keyword | reference)
               +  rewrite
                  +  set-dscp number
            +  match
               +  destination-ip
                  +  address string
                  +  mask string
                  +  prefix string
               +  destination-port
                  +  operator keyword
                  +  range
                     +  end (number | keyword)
                     +  start (number | keyword)
                  +  value (number | keyword)
               +  dscp-set (number | keyword)
               +  first-fragment boolean
               +  fragment boolean
               +  icmp
                  +  code number
                  +  type (number | keyword)
               +  protocol (number | keyword)
               +  source-ip
                  +  address string
                  +  mask string
                  +  prefix string
               +  source-port
                  +  operator keyword
                  +  range
                     +  end (number | keyword)
                     +  start (number | keyword)
                  +  value (number | keyword)
               +  tcp-flags string
            -  tcam-entries
               -  forwarding-complex complex-identifier string 
                  -  input-total number
                  -  output-total number
                  -  single-instance number
      +  ipv6-policy name string 
         +  entry sequence-id number 
            +  action
               +  drop-probability keyword
               +  forwarding-class (keyword | reference)
               +  rewrite
                  +  set-dscp number
            +  match
               +  destination-ip
                  +  address string
                  +  mask string
                  +  prefix string
               +  destination-port
                  +  operator keyword
                  +  range
                     +  end (number | keyword)
                     +  start (number | keyword)
                  +  value (number | keyword)
               +  dscp-set (number | keyword)
               +  icmp6
                  +  code number
                  +  type (number | keyword)
               +  next-header (number | keyword)
               +  source-ip
                  +  address string
                  +  mask string
                  +  prefix string
               +  source-port
                  +  operator keyword
                  +  range
                     +  end (number | keyword)
                     +  start (number | keyword)
                  +  value (number | keyword)
               +  tcp-flags string
            -  tcam-entries
               -  forwarding-complex complex-identifier string 
                  -  input-total number
                  -  output-total number
                  -  single-instance number
   +  vxlan-default reference
+  explicit-congestion-notification
   +  ecn-dscp-policy reference
+  forwarding-classes
   +  forwarding-class name string 
      +  forwarding-class-index number
      +  output
         +  multicast-queue reference
         +  unicast-queue reference
+  policer-templates
   +  policer-template name string 
      +  policer sequence-id number 
         +  committed-burst-size number
         +  committed-rate-kbps number
         +  exceed-action
            +  drop-probability keyword
         +  forwarding-class fc (reference | keyword) 
            +  forwarding-type keyword
         +  maximum-burst-size number
         +  peak-rate-kbps number
         +  violate-action
            +  drop 
            +  drop-probability keyword
      +  statistics-mode keyword
+  preserve-dscp boolean
+  queue-templates
   +  queue-template name string 
      +  active-queue-management
         +  ecn-slope ecn-drop-probability keyword 
            +  max-probability number
            +  max-threshold-percent number
            +  min-threshold-percent number
         +  weight-factor number
         +  wred-slope traffic-type keyword drop-probability keyword 
            +  max-probability number
            +  max-threshold-percent number
            +  min-threshold-percent number
      +  queue-depth
         +  high-threshold-bytes number
         +  maximum-burst-size number
+  queues
   +  queue name string 
+  rewrite-rules
   +  dot1p-policy name string 
      +  map forwarding-class (reference | keyword) 
         +  dot1p number
         +  drop-probability drop-probability keyword 
            +  dot1p number
   +  dscp-policy name string 
      +  map forwarding-class (reference | keyword) 
         +  drop-probability drop-probability keyword 
            +  dscp (number | keyword)
         +  dscp (number | keyword)
   +  mpls-traffic-class-policy name string 
      +  map forwarding-class (reference | keyword) 
         +  drop-probability drop-probability keyword 
            +  traffic-class number
         +  traffic-class number
   +  vxlan-outer-header-dscp-policy reference
+  scheduler-policies
   +  scheduler-policy name string 
      +  scheduler sequence number 
         +  input id string 
            +  queue (reference | keyword)
            +  weight number
         +  priority keyword

qos Descriptions

qos

Description Top-level container for QoS data
Context qos
Treeqos
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

classifiers

Description Enter the classifiers context
Context qos classifiers
Treeclassifiers
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

dot1p-policy name string

Description Enter the dot1p-policy list instance
Context qos classifiers dot1p-policy name string
Treedot1p-policy
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
name string
Description

User-configured name for a 802.1p prioriy code point mapping policy

The name 'default' is reserved for the system default dot1p mapping policy.

Contextqos classifiers dot1p-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
dot1p value number
Description Enter the dot1p list instance
Context qos classifiers dot1p-policy name string dot1p value number
Treedot1p
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
value number
Description Enter the value context
Context qos classifiers dot1p-policy name string dot1p value number
Range0 to 7
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
drop-probability keyword
Description The drop probability to which the dot1p value is mapped
Contextqos classifiers dot1p-policy name string dot1p value number drop-probability keyword
Treedrop-probability
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
forwarding-class (reference | keyword)
Description The forwarding class to which the dot1p value is mapped
Contextqos classifiers dot1p-policy name string dot1p value number forwarding-class (reference | keyword)
Treeforwarding-class
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L

dscp-policy name string

Description Enter the dscp-policy list instance
Context qos classifiers dscp-policy name string
Treedscp-policy
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
name string
Description

User-configured name for a DSCP mapping policy

The name 'default' is reserved for the system default DSCP mapping policy.

Contextqos classifiers dscp-policy name string
String Length1 to 255
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
dscp value number
Description Enter the dscp list instance
Context qos classifiers dscp-policy name string dscp value number
Treedscp
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
value number
Description Enter the value context
Context qos classifiers dscp-policy name string dscp value number
Range0 to 63
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
drop-probability keyword
Description The drop probability to which the DSCP value is mapped
Contextqos classifiers dscp-policy name string dscp value number drop-probability keyword
Treedrop-probability
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
forwarding-class (reference | keyword)
Description The forwarding class to which the DSCP value is mapped
Contextqos classifiers dscp-policy name string dscp value number forwarding-class (reference | keyword)
Treeforwarding-class
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

mpls-traffic-class-policy name string

Description Enter the mpls-traffic-class-policy list instance
Contextqos classifiers mpls-traffic-class-policy name string
Treempls-traffic-class-policy
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
name string
Description

User-configured name for an MPLS traffic-class mapping policy

The name 'default' is reserved for the system default MPLS TC mapping policy.

Contextqos classifiers mpls-traffic-class-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
traffic-class value number
Description Enter the traffic-class list instance
Contextqos classifiers mpls-traffic-class-policy name string traffic-class value number
Treetraffic-class
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
drop-probability keyword
Description The drop probability to which the traffic-class value is mapped
Contextqos classifiers mpls-traffic-class-policy name string traffic-class value number drop-probability keyword
Treedrop-probability
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
forwarding-class (reference | keyword)
Description The forwarding class to which the MPLS traffic-class value is mapped
Contextqos classifiers mpls-traffic-class-policy name string traffic-class value number forwarding-class (reference | keyword)
Treeforwarding-class
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6

multifield

Description Container for multifield classification policies
Contextqos classifiers multifield
Treemultifield
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
ipv4-policy name string
Description List of IPv4 classifier policies
Context qos classifiers multifield ipv4-policy name string
Treeipv4-policy
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
name string
Description Name of the IPv4 classifier policy.
Context qos classifiers multifield ipv4-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
entry sequence-id number
Description List of classifier rules.
Context qos classifiers multifield ipv4-policy name string entry sequence-id number
Treeentry
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
sequence-id number
Description A number to indicate the relative evaluation order of the different entries; lower numbered entries are evaluated before higher numbered entries
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number
Range1 to 65535
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
action
Description Container for the actions to be applied to packets matching the classifier entry.
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number action
Treeaction
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
drop-probability keyword
Description

Assign matching packets to the specified drop probability level

The implicit default, if not specified, is low drop-probability.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number action drop-probability keyword
Treedrop-probability
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
forwarding-class (keyword | reference)
Description The forwarding class to which the DSCP value is mapped
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number action forwarding-class (keyword | reference)
Treeforwarding-class
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
rewrite
Description Rewrite actions associated with packets that match the classifier entry. Where a packet matches these criteria, the specified rewrite actions should be performed.
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number action rewrite
Treerewrite
ConfigurableTrue
PlatformsSupported on all platforms except 7250
match
Description Container for the conditions that determine whether a packet matches this entry
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match
Treematch
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
destination-ip
Description Packet matching criteria based on destination IPv4 address
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match destination-ip
Treedestination-ip
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
destination-port
Description

A packet matches this condition if its destination TCP or UDP port number matches the value or range that is specified

The rule should also have a condition that the IP protocol equals 6 (TCP) or 17 (UDP) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match destination-port
Treedestination-port
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
range
Description Container used to specify a contiguous range of TCP/UDP port numbers
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match destination-port range
Treerange
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
end (number | keyword)
Description The ending port number to include in the range
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match destination-port range end (number | keyword)
Treeend
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
start (number | keyword)
Description The starting port number to include in the range
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match destination-port range start (number | keyword)
Treestart
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
value (number | keyword)
Description A destination port number
Context qos classifiers multifield ipv4-policy name string entry sequence-id number match destination-port value (number | keyword)
Treevalue
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
dscp-set (number | keyword)
Description A list of DSCP values to be matched for incoming packets. An OR match should be performed, such that a packet must match one of the values defined in this list. If the field is left empty then any DSCP value matches.
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match dscp-set (number | keyword)
Treedscp-set
Range0 to 63
Options
  • CS0

  • LE

  • CS1

  • AF11

  • AF12

  • AF13

  • CS2

  • AF21

  • AF22

  • AF23

  • CS3

  • AF31

  • AF32

  • AF33

  • CS4

  • AF41

  • AF42

  • AF43

  • CS5

  • EF

  • CS6

  • CS7

Configurable True
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D1, 7220 IXR-D2, 7250 IXR-6
first-fragment boolean
Description

Match the first fragment of an IPv4 datagram

A packet matches the true condition if the IPv4 header indicates that the fragment-offset is zero and and the more-fragments bit is 1. It is not valid to configure this leaf without configuring a match value for the fragment leaf.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match first-fragment boolean
Treefirst-fragment
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
fragment boolean
Description

Match an IPv4 fragment

A packet matches the true condition if the IPv4 header indicates that the fragment-offset is zero and and the more-fragments bit is 1 or if the IPv4 header indicates that the fragment-offset is greater than 0. A packet matches the false condition if it is unfragmented.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match fragment boolean
Treefragment
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
icmp
Description

A packet matches this condition if its ICMP type and code matches one of the specified combinations

The rule should also have a condition that the IP protocol equals 1 (ICMP) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match icmp
Treeicmp
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
code number
Description

Match if the ICMP code value is any value in the list

Requires ICMP type to be specified because codes are type dependent.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match icmp code number
Treecode
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
type (number | keyword)
Description Match a single ICMP type value.
Context qos classifiers multifield ipv4-policy name string entry sequence-id number match icmp type (number | keyword)
Treetype
Range0 to 255
Options
  • echo-reply

    ICMP Echo Reply

  • dest-unreachable

    ICMP Destination Unreachable

  • source-quench

    ICMP Source Quench

  • redirect

    ICMP Redirect

  • echo

    ICMP Echo

  • router-advertise

    ICMP Router Advertisement

  • router-solicit

    ICMP Router Solicitation

  • time-exceeded

    ICMP Time Exceeded

  • param-problem

    ICMP Parameter Problem

  • timestamp

    ICMP Timestamp

  • timestamp-reply

    ICMP Timestamp Reply

Configurable True
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
protocol (number | keyword)
Description An IPv4 packet matches this condition if its IP protocol type field matches the specified value
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match protocol (number | keyword)
Treeprotocol
Range0 to 255
Options
  • ipv6-hop

    IPv6 hop-by-hop option

  • icmp

    Internet Control Message Protocol

  • igmp

    Internet Group Management Protocol

  • ggp

    Gateway-to-Gateway Protocol

  • ipv4

    IPv4 encapsulation

  • st

    Stream Protocol

  • tcp

    Transmission Control Protocol

  • egp

    Exterior Gateway Protocol

  • igp

    Interior Gateway Protocol

  • udp

    User Datagram Protocol

  • ipv6

    IPv6 encapsulation

  • idrp

    Inter-Domain Routing Protocol

  • rsvp

    Resource Reservation Protocol

  • gre

    Generic Routing Encapsulation

  • esp

    IPSec Encapsulating Security Payload

  • ah

    IPSec Authentication Header

  • icmp6

    IPSec Authentication Header

  • no-next-hdr

    No Next Header for IPv6

  • ipv6-dest-opts

    Destination Options for IPv6

  • eigrp

    Cisco EIGRP

  • ospf

    OSPFv2 and OSPFv3

  • pim

    Protocol Independent Multicast

  • vrrp

    Virtual Router Redundancy Protocol

  • l2tp

    Layer Two Tunneling Protocol

  • sctp

    Stream Control Transmission Protocol

  • mpls-in-ip

    MPLS Encapsulation inside IP

  • rohc

    Robust Header Compression

Configurable True
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
source-ip
Description Packet matching criteria based on source IPv4 address
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-ip
Treesource-ip
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
mask string
Description Match a packet if its source IP address logically anded with the inverse of this mask equals the configured IP address.
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-ip mask string
Treemask
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
source-port
Description

A packet matches this condition if its source TCP or UDP port number matches the value or range that is specified

The rule should also have a condition that the IP protocol equals 6 (TCP) or 17 (UDP) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-port
Treesource-port
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
operator keyword
Description

Comparison operator

eq = equal ge = greater than or equal to le = less than or equal to

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-port operator keyword
Treeoperator
Options
  • le

    Less than or equal.

  • ge

    Greater than or equal.

  • eq

    Equal to.

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
range
Description Container used to specify a contiguous range of TCP/UDP port numbers
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-port range
Treerange
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
end (number | keyword)
Description The ending port number to include in the range
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-port range end (number | keyword)
Treeend
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
start (number | keyword)
Description The starting port number to include in the range
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number match source-port range start (number | keyword)
Treestart
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
value (number | keyword)
Description A source port number
Context qos classifiers multifield ipv4-policy name string entry sequence-id number match source-port value (number | keyword)
Treevalue
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
tcam-entries
Description Information about the TCAM entries used to implement the ACL entry
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number tcam-entries
Treetcam-entries
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
forwarding-complex complex-identifier string
Description List of forwarding complexes in the system
Contextqos classifiers multifield ipv4-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string
Treeforwarding-complex
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
input-total number
Description

The number of TCAM entries required to implement this entry on all subinterfaces of this complex where the filter is applied to ingress traffic.

For example, if a single-instance of the entry takes 2 TCAM entries and the filter is an output-only subinterface-specific filter and the filter is applied to 5 subinterfaces on output and to 5 subinterfaces on input then input-total=2. If the entry is not applied to ingress traffic on any subinterfaces of this complex then input-total=0.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string input-total number
Treeinput-total
ConfigurableFalse
PlatformsSupported on all platforms
output-total number
Description

The number of TCAM entries required to implement this entry on all subinterfaces of this complex where the filter is applied to egress traffic.

For example, if a single-instance of the entry takes 2 TCAM entries and the filter is an output-only subinterface-specific filter and the filter is applied to 5 subinterfaces on output and to 5 subinterfaces on input then output-total=10. If the entry is not applied to egress traffic on any subinterfaces of this complex then output-total=0.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string output-total number
Treeoutput-total
ConfigurableFalse
PlatformsSupported on all platforms
single-instance number
Description

The number of TCAM entries required to implement this entry if it is applied to only one subinterface and one traffic direction specific to this slot.

This is non-zero even if the filter is not applied to any subinterfaces of this complex. It captures the effect of TCAM entry expansion to deal with L4 port or VLAN ranges, for example.

Contextqos classifiers multifield ipv4-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string single-instance number
Treesingle-instance
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
ipv6-policy name string
Description List of IPv6 classifier policies
Context qos classifiers multifield ipv6-policy name string
Treeipv6-policy
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
name string
Description Name of the IPv6 classifier policy.
Context qos classifiers multifield ipv6-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
entry sequence-id number
Description List of classifier rules.
Context qos classifiers multifield ipv6-policy name string entry sequence-id number
Treeentry
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
sequence-id number
Description A number to indicate the relative evaluation order of the different entries; lower numbered entries are evaluated before higher numbered entries
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number
Range1 to 65535
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
action
Description Container for the actions to be applied to packets matching the classifier entry.
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number action
Treeaction
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
drop-probability keyword
Description

Assign matching packets to the specified drop probability level

The implicit default, if not specified, is low drop-probability.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number action drop-probability keyword
Treedrop-probability
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
forwarding-class (keyword | reference)
Description The forwarding class to which the DSCP value is mapped
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number action forwarding-class (keyword | reference)
Treeforwarding-class
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
rewrite
Description Rewrite actions associated with packets that match the classifier entry. Where a packet matches these criteria, the specified rewrite actions should be performed.
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number action rewrite
Treerewrite
ConfigurableTrue
PlatformsSupported on all platforms except 7250
match
Description Container for the conditions that determine whether a packet matches this entry
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match
Treematch
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
destination-ip
Description Packet matching criteria based on destination IPv6 address
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match destination-ip
Treedestination-ip
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
destination-port
Description

A packet matches this condition if its destination TCP or UDP port number matches the value or range that is specified

The rule should also have a condition that the IP protocol equals 6 (TCP) or 17 (UDP) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match destination-port
Treedestination-port
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
range
Description Container used to specify a contiguous range of TCP/UDP port numbers
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match destination-port range
Treerange
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
end (number | keyword)
Description The ending port number to include in the range
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match destination-port range end (number | keyword)
Treeend
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
start (number | keyword)
Description The starting port number to include in the range
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match destination-port range start (number | keyword)
Treestart
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
value (number | keyword)
Description A destination port number
Context qos classifiers multifield ipv6-policy name string entry sequence-id number match destination-port value (number | keyword)
Treevalue
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
dscp-set (number | keyword)
Description A list of DSCP values to be matched for incoming packets. An OR match should be performed, such that a packet must match one of the values defined in this list. If the field is left empty then any DSCP value matches.
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match dscp-set (number | keyword)
Treedscp-set
Range0 to 63
Options
  • CS0

  • LE

  • CS1

  • AF11

  • AF12

  • AF13

  • CS2

  • AF21

  • AF22

  • AF23

  • CS3

  • AF31

  • AF32

  • AF33

  • CS4

  • AF41

  • AF42

  • AF43

  • CS5

  • EF

  • CS6

  • CS7

Configurable True
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D1, 7220 IXR-D2, 7250 IXR-6
icmp6
Description

A packet matches this condition if its ICMPv6 type and code matches one of the specified combinations

The rule should also have a condition that the next-header value equals 58 (ICMPv6) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match icmp6
Treeicmp6
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
code number
Description

Match if the ICMPv6 code value is any value in the list

Requires ICMPv6 type to be specified because codes are type dependent.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match icmp6 code number
Treecode
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
type (number | keyword)
Description Match a single ICMPv6 type value
Context qos classifiers multifield ipv6-policy name string entry sequence-id number match icmp6 type (number | keyword)
Treetype
Range0 to 255
Options
  • dest-unreachable

    ICMPv6 Destination Unreachable

  • packet-too-big

    ICMPv6 Packet Too Big

  • time-exceeded

    ICMPv6 Time Exceeded

  • param-problem

    Parameter Problem

  • echo-request

    ICMPv6 Echo Request

  • echo-reply

    ICMPv6 Echo Reply

  • mld-query

    Multicast Listener Discovery Query

  • mld-report

    Multicast Listener Discovery Report

  • mld-done

    Multicast Listener Discovery Done

  • router-solicit

    ICMPv6 Router Solicitation

  • router-advertise

    ICMPv6 Router Advertisement

  • neighbor-solicit

    ICMPv6 Neighbor Solicitation

  • neighbor-advertise

    ICMPv6 Neighbor Advertisement

  • redirect

    ICMPv6 Redirect

  • router-renumber

    ICMPv6 Router Renumbering

  • node-info-query

    ICMPv6 Node Information Query

  • node-info-response

    ICMPv6 Node Information Response

  • mld-v2

    Multicast Listener Discovery Version 2

  • mcast-rtr-adv

    Multicast Router Advertisement

  • mcast-rtr-solicit

    Multicast Router Solicitation

  • mcast-rtr-term

    Multicast Router Termination

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
next-header (number | keyword)
Description An IPv6 packet matches this condition if its first next-header field (in the IPv6 fixed header) contains the specified value
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match next-header (number | keyword)
Treenext-header
Range0 to 255
Options
  • ipv6-hop

    IPv6 hop-by-hop option

  • icmp

    Internet Control Message Protocol

  • igmp

    Internet Group Management Protocol

  • ggp

    Gateway-to-Gateway Protocol

  • ipv4

    IPv4 encapsulation

  • st

    Stream Protocol

  • tcp

    Transmission Control Protocol

  • egp

    Exterior Gateway Protocol

  • igp

    Interior Gateway Protocol

  • udp

    User Datagram Protocol

  • ipv6

    IPv6 encapsulation

  • idrp

    Inter-Domain Routing Protocol

  • rsvp

    Resource Reservation Protocol

  • gre

    Generic Routing Encapsulation

  • esp

    IPSec Encapsulating Security Payload

  • ah

    IPSec Authentication Header

  • icmp6

    IPSec Authentication Header

  • no-next-hdr

    No Next Header for IPv6

  • ipv6-dest-opts

    Destination Options for IPv6

  • eigrp

    Cisco EIGRP

  • ospf

    OSPFv2 and OSPFv3

  • pim

    Protocol Independent Multicast

  • vrrp

    Virtual Router Redundancy Protocol

  • l2tp

    Layer Two Tunneling Protocol

  • sctp

    Stream Control Transmission Protocol

  • mpls-in-ip

    MPLS Encapsulation inside IP

  • rohc

    Robust Header Compression

Configurable True
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
source-ip
Description Packet matching criteria based on source IPv6 address
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-ip
Treesource-ip
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
mask string
Description Match a packet if its source IP address logically anded with the inverse of this mask equals the configured IP address.
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-ip mask string
Treemask
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
source-port
Description

A packet matches this condition if its source TCP or UDP port number matches the value or range that is specified

The rule should also have a condition that the IP protocol equals 6 (TCP) or 17 (UDP) in order for this to be interpreted correctly.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-port
Treesource-port
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
operator keyword
Description

Comparison operator

eq = equal ge = greater than or equal to le = less than or equal to

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-port operator keyword
Treeoperator
Options
  • le

    Less than or equal.

  • ge

    Greater than or equal.

  • eq

    Equal to.

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
range
Description Container used to specify a contiguous range of TCP/UDP port numbers
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-port range
Treerange
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
end (number | keyword)
Description The ending port number to include in the range
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-port range end (number | keyword)
Treeend
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
start (number | keyword)
Description The starting port number to include in the range
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number match source-port range start (number | keyword)
Treestart
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
value (number | keyword)
Description A source port number
Context qos classifiers multifield ipv6-policy name string entry sequence-id number match source-port value (number | keyword)
Treevalue
Range0 to 65535
Options
  • acap

    Application Configuration Access Protocol

  • afp-tcp

    Apple Filing Protocol over TCP

  • arns

    A Remote Network Server System

  • asf-rmcp

    ASF Remote Management and Control Protocol & IPMI Remote Management Protocol

  • ashare

    AppleShare IP Web Administration

  • atalk-rm

    AppleTalk Routing Maintenance

  • aurp

    AppleTalk Update-Based Routing Protocol

  • auth

    Authentication Service

  • bfd

    Bidirectional Forwarding Detection Single Hop

  • bfd-echo

    BFD Echo

  • bftp

    Background File Transfer Program

  • bgmp

    Border Gateway Multicast Protocol

  • bgp

    Border Gateway Protocol

  • bootpc

    Bootstrap Protocol (BOOTP) Client and DHCP Client

  • bootps

    Bootstrap Protocol (BOOTP) Server and DHCP Server

  • ccso-ns

    CCSO Nameserver

  • chargen

    Character Generator Protocol (CHARGEN)

  • cisco-tdp

    Cisco Tag Distribution Protocol

  • citadel

    Citadel

  • clearcase

    ClearCase albd

  • commerce

    Commerce Applications

  • courier

    Remote Procedure Call

  • daytime

    Daytime Protocol

  • dhcpv6-client

    DHCPv6 Client

  • dhcpv6-server

    DHCPv6 Server

  • dhcp-failover

    DHCP Failover Protocol

  • dicom

    Digital Imaging and Communications in Medicine

  • discard

    Discard Protocol. Also Wake-on-LAN.

  • dnsix

    DNSIX security protocol auditing

  • domain

    Domain Name System

  • dsp

    Display Support Protocol

  • echo

    Echo Protocol

  • epp

    Extensible Provisioning Protocol

  • esro

    Efficient Short Remote Operations (ESRO)

  • exec

    Remote Process Execution (Rexec)

  • finger

    Finger protocol

  • ftp

    File Transfer Protocol control

  • ftp-data

    File Transfer Protocol data

  • ftps

    FTPS (FTP over SSL/TLS) control

  • ftps-data

    FTPS (FTP over SSL/TLS) data

  • godi

    Group Domain Of Interpretation (GDOI) protocol

  • gopher

    Gopher protocol

  • gtp-c

    GTP control messages (GTP-C)

  • gtp-prime

    GTP prime CDR logging protocol

  • gtp-u

    GTP user data messages (GTP-U)

  • ha-cluster

    Linux-HA high-availability heartbeat

  • hostname

    NIC hostname server

  • hp-alarm-mgr

    HP data alarm manager

  • http

    Hypertext Transfer Protocol

  • http-alt

    FileMaker Web Sharing (HTTP Alternate)

  • http-mgmt

    http-mgmt

  • http-rpc

    Remote procedure call over Hypertext Transfer Protocol

  • https

    Hypertext Transfer Protocol over TLS/SSL

  • ieee-mms-ssl

    IEEE Media Management System over SSL

  • imap

    Internet Message Access Protocol (IMAP)

  • imap3

    Internet Message Access Protocol (IMAP), version 3

  • imaps

    Internet Message Access Protocol over TLS/SSL

  • ipp

    Internet Printing Protocol

  • ipsec

    Internet Protocol Security (IPSec)

  • ipx

    Internetwork Packet Exchange (IPX)

  • irc

    Internet Relay Chat (IRC)

  • iris-beep

    IRIS (Internet Registry Information Service) over BEEP

  • isakmp

    Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)

  • isakmp-nat

    IPSec NAT Traversal

  • iscsi

    iSCSI

  • iso-tsap

    ISO Transport Service Access Point (TSAP) Class 0 protocol

  • kerberos

    Kerberos authentication system

  • kerberos-adm

    Kerberos administration

  • klogin

    Kerberos login

  • kpasswd

    Kerberos Change/Set password

  • kshell

    Kerberos Remote shell

  • l2tp

    Layer 2 Forwarding Protocol (L2F) and Layer 2 Tunneling Protocol (L2TP)

  • ldap

    Lightweight Directory Access Protocol (LDAP)

  • ldaps

    Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

  • ldp

    Label Distribution Protocol

  • lmp

    Link Management Protocol (LMP)

  • login

    rlogin (TCP) or Who (UDP)

  • lpd

    Line Printer Daemon

  • lsp-ping

    MPLS LSP-echo

  • mac-server-adm

    Mac OS X Server administration

  • matip-a

    Mapping of Airline Traffic over Internet Protocol (MATIP) type A

  • matip-b

    Mapping of Airline Traffic over Internet Protocol (MATIP) type B

  • micro-bfd

    BFD session over each LAG member link

  • microsoft-ds

    Microsoft Directory Services

  • mobile-ip

    Mobile IP Agent

  • monitor

    Monitor

  • mpp

    Message posting protocol (MPP)

  • mssql-m

    Microsoft SQL Server database management system (MSSQL) monitor

  • mssql-s

    Microsoft SQL Server database management system (MSSQL) server

  • msdp

    Multicast Source Discovery Protocol

  • ms-exchange

    MS Exchange Routing

  • msp

    Message Send Protocol

  • multihop-bfd

    Bidirectional Forwarding Detection Multi-Hop

  • nas

    Netnews Administration System (NAS)

  • ncp

    NetWare Core Protocol

  • netrjs-1

    NETRJS protocol

  • netrjs-2

    NETRJS protocol

  • netrjs-3

    NETRJS protocol

  • netrjs-4

    NETRJS protocol

  • netbios-data

    NetBIOS Datagram Service

  • netbios-ns

    NetBIOS Name Service

  • netbios-ss

    NetBIOS Session Service

  • netnews

    Netnews

  • netwall

    netwall, for Emergency Broadcasts

  • new-rwho

    new-rwho, new-who

  • nfs

    Network File System (NFS)

  • nntp

    Network News Transfer Protocol (NNTP)

  • nntps

    Network News Transfer Protocol over TLS/SSL (NNTPS)

  • ntp

    Network Time Protocol (NTP)

  • odmr

    On-Demand Mail Relay (ODMR)

  • olsr

    Optimized Link State Routing (OLSR)

  • openvpn

    OpenVPN

  • pim-auto-rp

    PIM Auto-RP

  • pkix-timestamp

    PKIX Time Stamp Protocol (TSP)

  • pop2

    Post Office Protocol, version 2 (POP2)

  • pop3

    Post Office Protocol, version 3 (POP3)

  • pop3s

    Post Office Protocol 3 over TLS/SSL (POP3S)

  • pptp

    Point-to-Point Tunneling Protocol (PPTP)

  • ptp-event

    Precision Time Protocol (PTP) event messages

  • ptp-general

    Precision Time Protocol (PTP) general messages

  • print-srv

    Network PostScript print server

  • qmtp

    Quick Mail Transfer Protocol

  • qotd

    Quote of the Day (QOTD)

  • radius

    RADIUS authentication protocol

  • radius-acct

    RADIUS accounting protocol

  • remote-mail

    Remote Mail Checking Protocol

  • remotefs

    Remotefs, RFS Server

  • remotecmd

    SupportSoft Nexus Remote Command

  • rip

    Routing Information Protocol

  • rje

    Remote Job Entry

  • rlp

    Resource Location Protocol

  • rlzdb

    RLZ DBase

  • rmc

    IBM RMC (Remote monitoring and Control) protocol

  • rmonitor

    rmonitor, Remote Monitor

  • rpc2portmap

    Rpc2portmap

  • rsync

    rsync file synchronization protocol

  • rtelnet

    Remote User Telnet Service (RTelnet)

  • rtsp

    Real Time Streaming Protocol (RTSP)

  • sgmp

    Simple Gateway Monitoring Protocol (SGMP)

  • silc

    Secure Internet Live Conferencing (SILC)

  • smux

    SNMP multiplexing protocol (SMUX)

  • sna-gw

    IBM Systems Network Architecture (SNA) gateway access server

  • snmp

    Simple Network Management Protocol (SNMP)

  • snmp-trap

    SNMP Traps

  • snpp

    Simple Network Paging Protocol (SNPP)

  • smtp

    Simple Mail Transfer Protocol (SMTP)

  • sql-svcs

    Structured Query Language (SQL) Services

  • sql

    Structured Query Language (SQL) Service

  • ssh

    Secure Shell Protocol

  • submission

    Email message submission (SMTP)

  • sunrpc

    Open Network Computing Remote Procedure Call (ONC RPC), also Sun RPC

  • svcloc

    Service Location Protocol (SLP)

  • syslog

    Syslog (UDP) and Remote Shell (TCP)

  • systat

    Active Users (systat service)

  • tacacs

    TACACS Login Host protocol

  • talk

    Talk

  • tcpmux

    TCP Port Service Multiplexer (TCPMUX)

  • tcpnethaspsrv

    tcpnethaspsrv, Aladdin Knowledge Systems Hasp services

  • tftp

    Trivial File Transfer Protocol (TFTP)

  • time

    Time Protocol

  • timed

    Timeserver

  • ups

    Uninterruptible power supply (UPS)

  • xdmcp

    X Display Manager Control Protocol (XDMCP)

  • xns-ch

    Xerox Network Systems (XNS) Clearinghouse (Name Server)

  • xns-mail

    Xerox Network Systems (XNS) Mail

  • xns-time

    Xerox Network Systems (XNS) Time Protocol

  • z3950

    ANSI Z39.50

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
tcam-entries
Description Information about the TCAM entries used to implement the ACL entry
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number tcam-entries
Treetcam-entries
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
forwarding-complex complex-identifier string
Description List of forwarding complexes in the system
Contextqos classifiers multifield ipv6-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string
Treeforwarding-complex
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6
input-total number
Description

The number of TCAM entries required to implement this entry on all subinterfaces of this complex where the filter is applied to ingress traffic.

For example, if a single-instance of the entry takes 2 TCAM entries and the filter is an output-only subinterface-specific filter and the filter is applied to 5 subinterfaces on output and to 5 subinterfaces on input then input-total=2. If the entry is not applied to ingress traffic on any subinterfaces of this complex then input-total=0.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string input-total number
Treeinput-total
ConfigurableFalse
PlatformsSupported on all platforms
output-total number
Description

The number of TCAM entries required to implement this entry on all subinterfaces of this complex where the filter is applied to egress traffic.

For example, if a single-instance of the entry takes 2 TCAM entries and the filter is an output-only subinterface-specific filter and the filter is applied to 5 subinterfaces on output and to 5 subinterfaces on input then output-total=10. If the entry is not applied to egress traffic on any subinterfaces of this complex then output-total=0.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string output-total number
Treeoutput-total
ConfigurableFalse
PlatformsSupported on all platforms
single-instance number
Description

The number of TCAM entries required to implement this entry if it is applied to only one subinterface and one traffic direction specific to this slot.

This is non-zero even if the filter is not applied to any subinterfaces of this complex. It captures the effect of TCAM entry expansion to deal with L4 port or VLAN ranges, for example.

Contextqos classifiers multifield ipv6-policy name string entry sequence-id number tcam-entries forwarding-complex complex-identifier string single-instance number
Treesingle-instance
ConfigurableFalse
Platforms7250 IXR-10e, 7250 IXR-6e, 7220 IXR-D3L, 7220 IXR-D2L, 7250 IXR-10, 7220 IXR-D3, 7220 IXR-D2, 7250 IXR-6

vxlan-default reference

Description Reference to the name of a DSCP mapping policy that applies to terminating VXLAN packets.
Contextqos classifiers vxlan-default reference
Treevxlan-default
Referenceqos classifiers dscp-policy name string
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2

explicit-congestion-notification

Description Enable the explicit-congestion-notification context
Contextqos explicit-congestion-notification
Treeexplicit-congestion-notification
ConfigurableTrue
PlatformsSupported on all platforms

forwarding-classes

Description Enclosing container for list of user-defined forwarding class names
Contextqos forwarding-classes
Treeforwarding-classes
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

forwarding-class name string

Description Enter the forwarding-class list instance
Contextqos forwarding-classes forwarding-class name string
Treeforwarding-class
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
name string
Description

User-defined name of the forwarding class

The following forwarding-class names are the system-reserved default FC names on 7250 IXR systems: fc0, fc1, fc2, fc3, fc4, fc5, fc6, and fc7.

Contextqos forwarding-classes forwarding-class name string
String Length1 to 255
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
forwarding-class-index number
Description

Associates the forwarding class name with an index representing the forwarding-class-index. Forwarding classes with a higher forwarding-class-index are generally (subject to scheduler configuration) serviced more preferentially than forwarding classes with a lower forwarding-class-index.

For the system-reserved default forwarding classes: fc0 -> forwarding-class-index = 0 fc1 -> forwarding-class-index = 1 fc2 -> forwarding-class-index = 2 fc3 -> forwarding-class-index = 3 fc4 -> forwarding-class-index = 4 fc5 -> forwarding-class-index = 5 fc6 -> forwarding-class-index = 6 fc7 -> forwarding-class-index = 7 fc8 -> forwarding-class-index = 8 fc9 -> forwarding-class-index = 9 fc10 -> forwarding-class-index = 10 fc11 -> forwarding-class-index = 11 fc12 -> forwarding-class-index = 12 fc13 -> forwarding-class-index = 13 fc14 -> forwarding-class-index = 14 fc15 -> forwarding-class-index = 15

Contextqos forwarding-classes forwarding-class name string forwarding-class-index number
Treeforwarding-class-index
Range0 to 15
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
output
Description Enter the output context
Context qos forwarding-classes forwarding-class name string output
Treeoutput
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
unicast-queue reference
Description

Output queue for unicast packets within this forwarding class

For the system-reserved default forwarding classes: fc0 -> unicast-queue = unicast-queue0 fc1 -> unicast-queue = unicast-queue1 fc2 -> unicast-queue = unicast-queue2 fc3 -> unicast-queue = unicast-queue3 fc4 -> unicast-queue = unicast-queue4 fc5 -> unicast-queue = unicast-queue5 fc6 -> unicast-queue = unicast-queue6 fc7 -> unicast-queue = unicast-queue7

Contextqos forwarding-classes forwarding-class name string output unicast-queue reference
Treeunicast-queue
Referenceqos queues queue name string
ConfigurableTrue
PlatformsSupported on all platforms

policer-templates

Description Enter the policer-templates context
Context qos policer-templates
Treepolicer-templates
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2

policer-template name string

Description List of policer templates.
Context qos policer-templates policer-template name string
Treepolicer-template
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
name string
Description The name assigned to the policer template.
Contextqos policer-templates policer-template name string
String Length1 to 255
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
policer sequence-id number
Description The list of policer instances belonging to the template definition.
Contextqos policer-templates policer-template name string policer sequence-id number
Treepolicer
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
Max. Elements32
sequence-id number
Description A number to indicate the relative evaluation order of the different policers in a template; policers with lower sequence-id numbers are evaluated before policers with higher sequence-id numbers
Contextqos policer-templates policer-template name string policer sequence-id number
Range1 to 65535
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
exceed-action
Description Container with options that specify the handling of packets that the policer has determined are exceeding (yellow)
Contextqos policer-templates policer-template name string policer sequence-id number exceed-action
Treeexceed-action
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
drop-probability keyword
Description Recolor exceeding packets to the specified drop-probability level
Contextqos policer-templates policer-template name string policer sequence-id number exceed-action drop-probability keyword
Treedrop-probability
Defaultmedium
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
forwarding-class fc (reference | keyword)
Description The list of forwarding classes with traffic to be sent to the policer. If this list is not configured then all subinterface traffic is matched.
Contextqos policer-templates policer-template name string policer sequence-id number forwarding-class fc (reference | keyword)
Treeforwarding-class
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
fc (reference | keyword)
Description A forwarding class that has traffic to match to the policer
Contextqos policer-templates policer-template name string policer sequence-id number forwarding-class fc (reference | keyword)
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
forwarding-type keyword
Description The list of forwarding types, belonging to this forwarding-class, to match to the policer. If none are specified, this implies ALL forwarding types.
Contextqos policer-templates policer-template name string policer sequence-id number forwarding-class fc (reference | keyword) forwarding-type keyword
Treeforwarding-type
Options
  • unicast

    A packet is 'unicast' if the destination address is unicast and it matches an entry in the FIB

  • unknown-unicast

    A packet is 'unknown-unicast' if the destination address is unicast but it doesn't match any entry in the FIB and is therefore conventionally flooded

  • broadcast

    A packet is 'broadcast' if the destination address is a broadcast address.

  • multicast

    A packet is 'multicast' if the destination address is a multicast address

    On TD3 systems this includes multicast packets with a known destination/group address and multicast packets with an unknown destination/group address. On TD4 systems this only includes known multicast packets.

  • unknown-multicast

    Multicast packets with an unknown destination/group address

ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
Max. Elements5
violate-action
Description Container with options that specify the handling of packets that the policer has determined are violating (red)
Contextqos policer-templates policer-template name string policer sequence-id number violate-action
Treeviolate-action
ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
drop-probability keyword
Description Recolor violating packets to the specified drop-probability level
Contextqos policer-templates policer-template name string policer sequence-id number violate-action drop-probability keyword
Treedrop-probability
Defaulthigh
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2
statistics-mode keyword
Description The statistics mode of all policers belonging to this template
Contextqos policer-templates policer-template name string statistics-mode keyword
Treestatistics-mode
Defaultviolating-focus
Options
  • violating-focus

    In this statistics mode only 4 counters are provided: accepted-packets, accepted-octets, violating-packets, violating-octets

  • forwarding-focus

    In this statistics mode only 4 counters are provided: committed-packets, committed-octets, exceeding-packets, exceeding-octets

ConfigurableTrue
Platforms7220 IXR-D3L, 7220 IXR-D2L, 7220 IXR-D5, 7220 IXR-D4, 7220 IXR-D3, 7220 IXR-D2

preserve-dscp boolean

Description

When forwarding an untunneled IP packet or decapsulating an IP-in-IP packet, preserve the received DSCP and use it in the transmitted packet.

This should not be enabled unless all IP packets have been classified by a multi-field classifier policy

Contextqos preserve-dscp boolean
Treepreserve-dscp
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e

queue-templates

Description Enter the queue-templates context
Context qos queue-templates
Treequeue-templates
ConfigurableTrue
PlatformsSupported on all platforms

queue-template name string

Description

List of queue templates that can be applied to egress queues or VOQ sets

7250 IXR-6/10 supports a maximum 8 queue-templates. 7220-D2/D3/D5/H2/H3 supports a maximum of 64 queue-templates.

Contextqos queue-templates queue-template name string
Treequeue-template
ConfigurableTrue
PlatformsSupported on all platforms
Max. Elements64
name string
Description

The name of the queue template

The queue template with the special name 'default' is used when a queue-template reference is missing.

Contextqos queue-templates queue-template name string
String Length1 to 255
ConfigurableTrue
PlatformsSupported on all platforms
active-queue-management
Description Enable the active-queue-management context
Contextqos queue-templates queue-template name string active-queue-management
Treeactive-queue-management
ConfigurableTrue
PlatformsSupported on all platforms
ecn-slope ecn-drop-probability keyword
Description List of ECN slopes.
Context qos queue-templates queue-template name string active-queue-management ecn-slope ecn-drop-probability keyword
Treeecn-slope
ConfigurableTrue
PlatformsSupported on all platforms
ecn-drop-probability keyword
Description The drop probability to which the ECN slope applies.
Contextqos queue-templates queue-template name string active-queue-management ecn-slope ecn-drop-probability keyword
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

  • all

    All traffic, consisting of traffic marked low, medium and high drop-probability.

ConfigurableTrue
PlatformsSupported on all platforms
max-probability number
Description

The maximum probability of marking a packet (at or above the max-threshold).

On 7220-D2/D3/D5/H2/H3 max-probability has a limited set of discrete values: 1,2,3,4,5,6,7,8,9,10,25,50,75,100. The user is allowed to enter any value but the system will choose the next-highest value that is supported.

A slope is disabled by setting min-threshold-percent=100, max-threshold-percent=100 and max-probability=0.

Contextqos queue-templates queue-template name string active-queue-management ecn-slope ecn-drop-probability keyword max-probability number
Treemax-probability
Range0 to 100
Default0
ConfigurableTrue
PlatformsSupported on all platforms
wred-slope traffic-type keyword drop-probability keyword
Description List of WRED slopes.
Context qos queue-templates queue-template name string active-queue-management wred-slope traffic-type keyword drop-probability keyword
Treewred-slope
ConfigurableTrue
PlatformsSupported on all platforms
traffic-type keyword
Description The traffic type to which the WRED slope applies.
Contextqos queue-templates queue-template name string active-queue-management wred-slope traffic-type keyword drop-probability keyword
Options
  • tcp

    Refers to IPv4/IPv6 packets with a protocol/next-header indicating a value of 6.

  • non-tcp

    Refers to all packets that are not IPv4/IPv6 packets with a protocol/next-header indicating a value of 6.

  • all

    Refers to all traffic, whether it is TCP or non-TCP.

ConfigurableTrue
PlatformsSupported on all platforms
drop-probability keyword
Description The drop probability to which the WRED slope applies.
Contextqos queue-templates queue-template name string active-queue-management wred-slope traffic-type keyword drop-probability keyword
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
queue-depth
Description Enter the queue-depth context
Context qos queue-templates queue-template name string queue-depth
Treequeue-depth
ConfigurableTrue
PlatformsSupported on all platforms
high-threshold-bytes number
Description

The queue depth that, when crossed in a rising direction, triggers a hardware interrupt and a recording of the current system time.

The default value of 0 disables the functionality.

On IXR-6/10 this parameter applies to a set of VOQs (and therefore to unicast traffic only). On 7220-D2/D3/H2/H3 this parameter applies to a unicast queue only; the configuration of this leaf is ignored when the queue-template is attached to a queue with queue-type other than unicast.

On 7220-D2/D3 the threshold is rounded up the nearest multiple of 2048 bytes. On IXR-6/10 the threshold is rounded up to the nearest multiple of 4096 bytes. On 7220-H2/H3 the threshold is rounded up to the nearest multiple of 254 bytes.

Contextqos queue-templates queue-template name string queue-depth high-threshold-bytes number
Treehigh-threshold-bytes
Default0
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D5
maximum-burst-size number
Description

Maximum amount of shared buffer memory available to the queue.

On IXR-6/10 this parameter applies to a set of VOQs. If the configured value is 0 or no value is configured the limit is 256 MB (268435456 bytes), however the use of 'alpha' may limit the effective value to less than 256 MB. A configured non-zero value sets a static limit without 'alpha'.

On 7220-D2/D3/D5/H2/H3 this parameter applies to an egress queue and the default value of zero instructs the forwarding chip to apply its own limit based on 'alpha'. A non-zero value disables 'alpha'. The alpha value is 5 (0.25 multiplier of shared buffer space) for unicast queues and 4 (0.125 multiplier of shared buffer space) for multicast queues.

Must be non-zero/non-default in order to add the active-queue-management presence container.

Contextqos queue-templates queue-template name string queue-depth maximum-burst-size number
Treemaximum-burst-size
Default0
Unitsbytes
Configurable True
PlatformsSupported on all platforms

queues

Description Enclosing container for the list of user-defined queue names
Contextqos queues
Treequeues
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

queue name string

Description List of user-defined queues
Context qos queues queue name string
Treequeue
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
name string
Description

User-defined name of the queue

The following queue names are the system-reserved default queue names on 7250 IXR systems: unicast-0, unicast-1, unicast-2, unicast-3, unicast-4, unicast-5, unicast-6, and unicast-7.

Contextqos queues queue name string
String Length1 to 255
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

rewrite-rules

Description Enter the rewrite-rules context
Context qos rewrite-rules
Treerewrite-rules
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1

dot1p-policy name string

Description Enter the dot1p-policy list instance
Context qos rewrite-rules dot1p-policy name string
Treedot1p-policy
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
name string
Description User-configured name for an 802.1p priorty code point rewrite policy.
Contextqos rewrite-rules dot1p-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
map forwarding-class (reference | keyword)
Description Enter the map list instance
Context qos rewrite-rules dot1p-policy name string map forwarding-class (reference | keyword)
Treemap
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
forwarding-class (reference | keyword)
Description The forwarding class name
Context qos rewrite-rules dot1p-policy name string map forwarding-class (reference | keyword)
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7220 IXR-D3, 7220 IXR-D3L, 7220 IXR-D2, 7220 IXR-D2L
dot1p number
Description The dot1p marking to be used for all packets associated with the FC, except those with a drop-probability-specific or profile-specific override.
Contextqos rewrite-rules dot1p-policy name string map forwarding-class (reference | keyword) dot1p number
Treedot1p
Range0 to 7
ConfigurableTrue
PlatformsSupported on all platforms
drop-probability drop-probability keyword
Description Enter the drop-probability list instance
Contextqos rewrite-rules dot1p-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Treedrop-probability
ConfigurableTrue
PlatformsSupported on all platforms
drop-probability keyword
Description A drop probability level within the FC for which a different remarking is desired.
Contextqos rewrite-rules dot1p-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms

dscp-policy name string

Description Enter the dscp-policy list instance
Context qos rewrite-rules dscp-policy name string
Treedscp-policy
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
name string
Description User-configured name for a DSCP rewrite policy.
Contextqos rewrite-rules dscp-policy name string
String Length1 to 255
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
map forwarding-class (reference | keyword)
Description Enter the map list instance
Context qos rewrite-rules dscp-policy name string map forwarding-class (reference | keyword)
Treemap
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
forwarding-class (reference | keyword)
Description The forwarding class name
Context qos rewrite-rules dscp-policy name string map forwarding-class (reference | keyword)
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
PlatformsSupported on all platforms except 7220 IXR-D1
drop-probability drop-probability keyword
Description Enter the drop-probability list instance
Contextqos rewrite-rules dscp-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Treedrop-probability
ConfigurableTrue
PlatformsSupported on all platforms
drop-probability keyword
Description A drop probability level within the FC for which a different remarking is desired.
Contextqos rewrite-rules dscp-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms
dscp (number | keyword)
Description The DSCP marking to be used for all packets associated with the FC, except those with a drop-probability-specific or profile-specific override.
Contextqos rewrite-rules dscp-policy name string map forwarding-class (reference | keyword) dscp (number | keyword)
Treedscp
Range0 to 63
Options
  • CS0

  • LE

  • CS1

  • AF11

  • AF12

  • AF13

  • CS2

  • AF21

  • AF22

  • AF23

  • CS3

  • AF31

  • AF32

  • AF33

  • CS4

  • AF41

  • AF42

  • AF43

  • CS5

  • EF

  • CS6

  • CS7

Configurable True
PlatformsSupported on all platforms except 7220 IXR-D1

mpls-traffic-class-policy name string

Description Enter the mpls-traffic-class-policy list instance
Contextqos rewrite-rules mpls-traffic-class-policy name string
Treempls-traffic-class-policy
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
name string
Description User-configured name for an MPLS traffic-class rewrite policy.
Contextqos rewrite-rules mpls-traffic-class-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
map forwarding-class (reference | keyword)
Description Enter the map list instance
Context qos rewrite-rules mpls-traffic-class-policy name string map forwarding-class (reference | keyword)
Treemap
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
forwarding-class (reference | keyword)
Description The forwarding class name
Context qos rewrite-rules mpls-traffic-class-policy name string map forwarding-class (reference | keyword)
Options
  • fc0

    System default forwarding-class name for the FC with index 0

  • fc1

    System default forwarding-class name for the FC with index 1

  • fc2

    System default forwarding-class name for the FC with index 2

  • fc3

    System default forwarding-class name for the FC with index 3

  • fc4

    System default forwarding-class name for the FC with index 4

  • fc5

    System default forwarding-class name for the FC with index 5

  • fc6

    System default forwarding-class name for the FC with index 6

  • fc7

    System default forwarding-class name for the FC with index 7

  • fc8

    System default forwarding-class name for the FC with index 8

  • fc9

    System default forwarding-class name for the FC with index 9

  • fc10

    System default forwarding-class name for the FC with index 10

  • fc11

    System default forwarding-class name for the FC with index 11

  • fc12

    System default forwarding-class name for the FC with index 12

  • fc13

    System default forwarding-class name for the FC with index 13

  • fc14

    System default forwarding-class name for the FC with index 14

  • fc15

    System default forwarding-class name for the FC with index 15

Referenceqos forwarding-classes forwarding-class name string
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
drop-probability drop-probability keyword
Description Enter the drop-probability list instance
Contextqos rewrite-rules mpls-traffic-class-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Treedrop-probability
ConfigurableTrue
PlatformsSupported on all platforms
drop-probability keyword
Description A drop probability level within the FC for which a different remarking is desired.
Contextqos rewrite-rules mpls-traffic-class-policy name string map forwarding-class (reference | keyword) drop-probability drop-probability keyword
Options
  • low

    Traffic that should be dropped last when there is congestion. Internally this is traffic that is colored green.

  • medium

    Traffic that should be dropped before green traffic but after red traffic when there is congestion. Internally this is traffic that is colored yellow.

  • high

    Traffic that should be dropped first when there is congestion. Internally this is traffic that is colored red.

ConfigurableTrue
PlatformsSupported on all platforms

scheduler-policies

Description Container for the list of configured scheduler policies.
Contextqos scheduler-policies
Treescheduler-policies
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6

scheduler-policy name string

Description List of scheduler policies. A scheduler policy is a set of schedulers that are to be applied together. Each scheduler within a scheduler policy takes an input, and outputs it according to a scheduling discipline that is specified within it.
Contextqos scheduler-policies scheduler-policy name string
Treescheduler-policy
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
name string
Description Name for the scheduler policy.
Context qos scheduler-policies scheduler-policy name string
String Length1 to 255
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
scheduler sequence number
Description List of defined QoS traffic schedulers.
Contextqos scheduler-policies scheduler-policy name string scheduler sequence number
Treescheduler
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
sequence number
Description Sequence number for the scheduler within the scheduler policy. Schedulers are processed from lowest sequence to highest.
Contextqos scheduler-policies scheduler-policy name string scheduler sequence number
Range0 to 2
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
input id string
Description List of input sources for the scheduler.
Contextqos scheduler-policies scheduler-policy name string scheduler sequence number input id string
Treeinput
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
queue (reference | keyword)
Description The queue that is the input to the scheduler
Contextqos scheduler-policies scheduler-policy name string scheduler sequence number input id string queue (reference | keyword)
Treequeue
Options
  • unicast-0

  • unicast-1

  • unicast-2

  • unicast-3

  • unicast-4

  • unicast-5

  • unicast-6

  • unicast-7

  • multicast-0

  • multicast-1

  • multicast-2

  • multicast-3

  • multicast-4

  • multicast-5

  • multicast-6

  • multicast-7

  • queue-0

  • queue-1

  • queue-2

  • queue-3

  • queue-4

  • queue-5

  • queue-6

  • queue-7

  • queue-8

  • queue-9

  • queue-10

  • queue-11

  • queue-12

  • queue-13

  • queue-14

  • queue-15

Referenceqos queues queue name string
ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6
priority keyword
Description Priority of the scheduler within the scheduler policy.
Contextqos scheduler-policies scheduler-policy name string scheduler sequence number priority keyword
Treepriority
Options
  • strict

    This scheduler term is considered as a strict priority term - such that packets that arrive in the queue are immediately serviced.

ConfigurableTrue
Platforms7250 IXR-10e, 7250 IXR-6e, 7250 IXR-10, 7250 IXR-6