HP VPN Firewall Appliances Network Management Configuration Guide

295
Defining a policy
Configuring a policy
You associate a behavior with a class in a QoS policy to perform the actions defined in the behavior for
the class of packets.
To associate a class with a behavior in a policy:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a policy and enter
policy view.
qos policy policy-name N/A
3. Associate a class with a
behavior in the policy.
classifier classifier-name behavior
behavior-name
Repeat this step to create more
class-behavior associations.
IMPORTANT:
• On some devices, if the ACL contains deny rules, the if-match clause is ignored and the matching
process continues.
• On some devices, the ACL is used for classification only and the permit/deny action in ACL rules is
ignored. Actions taken on matching packets are defined in traffic behaviors.
Applying the QoS policy to an interface
A policy can be applied to multiple interfaces, but only one policy can be applied in one direction
(inbound or outbound) of an interface.
The QoS policy applied to the outgoing traffic on an interface does not regulate local packets, which are
critical protocol packets sent by the local system for operation maintenance. The most common local
packets include link maintenance, routing (IS-IS, BGP, and OSPF for example), RIP, and SSH packets.
To apply a QoS policy to the inbound direction of a VLAN interface, you must apply it in VLAN interface
view. To the outbound direction, you must apply it in interface view of each physical interface of the
VLAN.
To apply the QoS policy to an interface:
Ste
p
Command
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Apply the policy to the interface.
qos apply policy policy-name { inbound | outbound }