Patton electronic ONSITE 2800 - Manual (Page 102)

Link scheduler configuration task list 102
OnSite 2800 Series User Manual 8 • Link scheduler configuration
Mode: Configure
Example: Defining the access control list profile
In the example below a new access control list profile named Webserver is created. In addition an IP access con-
trol list entry that permits access for host at IP address 172.16.1.20, and specifies that packets matched by this
rule belong to the traffic-class Web is added. Finally an IP access control list entry that permits IP traffic to or
from all IP addresses is added to the access control list.
2800(cfg)#profile acl Webserver
2800(pf-acl)[Webserv~]#permit ip host 172.16.1.20 any traffic-class Web
2800(pf-acl)[Webserv~]#permit ip any any
After packet classification is done using access control lists, the link arbiter needs rules defining how to handle the
different traffic-classes. For that purpose you create a service-policy profile. The service policy profile defines how
the link arbiter has to share the available bandwidth among several traffic classes on a certain interface.
Creating a service policy profile
The service-policy profile defines how the link scheduler should handle different traffic-classes. The overall
structure of the profile is as follows:
Step Command Purpose
1 node(cfg)#profile acl name Creates a new access
control list profile named
name
2 node(pf-acl)[name]#permit ip host ip-address any traffic-class
class-name Creates an IP access con-
trol list entry that permits
access for host at IP
address ip-address, and
specifies that packets
matched by this rule
belong to the traffic-class
class-name.
3 node(pf-acl)[name]#permit ip any any Creates an IP access con-
trol list entry that permits
IP traffic to or from all IP
addresses.