Using match criteria
match
and ignore
commands in a class configuration:match
commandsDefine the values that header fields must contain for a packet to belong to the class and be managed by policy actions.
ignore
commandsDefine the values which, if contained in header fields, exclude a packet from the policy actions configured for the class. An ignored packet is transmitted without having a policy action performed on it.
As soon as a field in a packet header matches the criteria in a
match
statement, the sequential comparison of match criteria in the class stops, and the policy actions configured for the class are executed on the packet.If a packet matches the criteria in an
ignore
statement, the sequential comparison of match criteria in the class stops, and no policy action is performed on the packet.
The packet is transmitted without a policy action performed on it.
If a default class is configured in the policy, the actions specified in the
default-class
command are performed on packets that do not match the criteria in preceding classes in the policy.
IP source address (IPv4 and IPv6)
IP destination address (IPv4 and IPv6)
Layer 2 802.1Q VLAN ID
Layer 3 IP protocol
Layer 3 IP precedence bits
Layer 3 DSCP bits
Layer 4 TCP/UDP application port (including TCP flags)
VLAN ID