Marking packets for differentiated services (qos) – Avaya 3.7 User Manual

Page 192

Advertising
background image

Establishing security

192 Avaya VPNmanager Configuration Guide Release 3.7

4. From the drop-down list, select Packet Filtering, then click GO to open the Policy Manager

for Packet Filtering.

5. Click Advanced to open the Packet Filter Rule-Advanced dialog box.

6. Use

Table 12

for determining which option you want.

7. Click OK to return to the Policy Manager for Packet Filtering.

8. Click Save to save your work.

Marking packets for differentiated services (QoS)

If your network is running Differentiated Services, a VSU can be configured to mark specific IP
packets for specific types of services.

Table 12: Packet Filter rule-advanced options

Option

Description

Permit all non VPN traffic

Select this button to permit all non VPN packets.

Deny all IP non VPN traffic

Select this button to block all IP non VPN packets.

Deny all non VPN traffic

Select this button to block all non VPN packets.

Drop all IP fragments

Select this check box to block all IP packets that
have been fragmented. See

Path MTU

Discovery on page 201

for information about

packet fragmentation.

Drop all Short IP Packets

Select this check box to block all IP packets that
are unusually small. The following are considered
short packets.

IP packets shorter than 20 bytes.

TCP packets shorter than 40 bytes.

UDP packets shorter than 28 bytes.

ICMP packets shorter than 28 bytes.

Keep Filter Statistics

Select this check box if you want to send the
“packet filtering log” to a common SNMP
manager. The manager that is used is configured
in the

Routing

.

Advertising