Differentiated Services policy examples

The goal of this Differentiated Services policy is to map a subset of the traffic outbound from an FTP server.

This policy is identified as a Differentiated Services policy by the PolicyScope DataTraffic attribute on the PolicyAction statement, as well as the use of several DS-only attributes.

The following statements apply to the example in this topic:

The policy rule selects traffic originated by ports in the range 20-21 (FTP outbound data connection uses port 20) from the source address 200.50.23.11.
The policy rule is active on weekdays between 6 a.m. and 10 p.m. local time, between the dates 7/1/2000 and 7/1/2005..
The policy action specifies that the ToS byte be set to '10000000' for traffic that conforms to this policy.
The action establishes a token bucket traffic conditioner with a mean rate of 256 kilobits per second, a peak rate of 512 kilobits per second, and a burst size of 64 kilobytes. Any traffic that exceeds these specifications will be sent as best effort, with an accompanying ToS byte of '00000000'.

 PolicyRule                               diffServ 
     { 
        ProtocolNumberRange                   6
        SourceAddressRange                    200.50.23.11 
        SourcePortRange                       20-21 
        PolicyActionReference                 tokenbucket
        PolicyRulePriority                    10
        ConditionTimeRange                    20000701000000:20050630235959
        DayOfMonthMask                        1111111111111111111111111111111 
        DayOfWeekMask                         0111110 
        TimeOfDayRange                        06:00-22:00 
     } 
     PolicyAction                             tokenbucket
     { 
        PolicyScope                           DataTraffic 
        OutgoingTOS                           10000000 
        DiffServInProfileRate                 256       # 256 Kbps 
        DiffServInProfileTokenBucket          512       # 512 Kbits 
        DiffServInProfilePeakRate             512       # 512 Kbps 
        DiffServInProfileMaxPacketSize        120       # 120 Kbits 
        DiffServOutProfileTransmittedTOSByte  00000000 
        DiffServExcessTrafficTreatment        BestEffort 
     }

The goal of this policy is to ensure that outgoing data that match the specified attributes will be assigned a QoS service level defined in action "interactive1".

The following statements apply to the example in this topic:

This rule will match traffic only on TCP connections (protocol 6) with a source port of 80 (i.e. HTTP server) and application defined data beginning with the string "/catalog".
Because we are dealing with HTTP traffic, this rule is basically indicating that all outgoing traffic associated with a URI that begins with "/catalog" should be managed using the DS characteristics specified in the "interactive1" policy action.

PolicyRule          web-catalog       # web catalog traffic 
{                                                 
     protocolNumberRange  6                       
     SourcePortRange    80                        
     ApplicationData /catalog
     policyActionReference  interactive1   
     
}                                                 

PolicyAction      interactive1
{
    policyScope DataTraffic
    outgoingTOS 10000000
}