Fortinet 548B - Manual (Page 379)

- 379 -
Command Mode
Policy-Class-Map Config
Policy Type
In
Incompatibilities
Drop, Mark (all forms)
7.21.3.11 police-simple
This command is used to establish the traffic policing style for the specified class. The simple form of the
police command uses a single data rate and burst size, resulting in two outcomes: conform and violate.
The conforming data rate is specified in kilobits-per-second (Kbps) and is an integer from 1 to
4294967295. The conforming burst size is specified in kilobytes (KB) and is an integer from 1 to 128.
For each outcome, the only possible actions are drop, set-cos-transmit, set-dscp-transmit,
setprec-transmit, or transmit. In this simple form of the police command, the conform action defaults to
transmit and the violate action defaults to drop.
For set-dscp-transmit, a <dscpval> value is required and is specified as either an integer from 0 to 63, or
symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23,
af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
For set-prec-transmit, an IP Precedence value is required and is specified as an integer from 0-7.
For set-cos-transmit an 802.1p priority value is required and is specified as an integer from 0-7.
Syntax
police-simple {<1-4294967295> <1-128> conform-action {drop | set-prec-transmit <0-7> |
set-dscp-transmit <0-63> | set-cos-transmit <0-7> | transmit} [violate-action {drop | set-prectransmit
<0-7> | set-dscp-transmit <0-63> | set-cos-transmit <0- 7> | transmit}]}
The simple form of the police command uses a single data rate and burst size, resulting in two
outcomes:
<conform-action & violate-action> - The conforming data rate is specified in kilobits-per-second
(Kbps) and is an integer from 1 to 4294967295. The conforming burst size is specified in kilobytes
(KB) and is an integer from 1 to 128. For each outcome, the only possible actions are drop,
set-dscp-transmit, set-prec-transmit, or set-cos-transmit. In this simple form of the police command,
the conform action defaults to transmit and the violate action defaults to drop. These actions can be
set with this command once the style has been configured. Beside, the set-cos-transmit is to
combine only with drop between the conform-action and the violate-action.
<set-cos-transmit> - an priority value is required and is specified as an integer from 0-7.
<set-dscp-transmit> - is required and is specified as either an integer from 0 to 63, or symbolically
through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41,
af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.