close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

rule (Services CoS Next Gen Services)

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

rule rule-name {
    match-direction (input | input-output | output);
    policy policy-name {
        match {
            application [ application-names ];
            destination-address address;
            destination-address-range low minimum-value high maximum-value;
            destination-port port-number;
            destination-prefix-list list-name;
            source-address address;
            source-address-range low minimum-value high maximum-value;
            source-prefix-list list-name;
        }
        then {
            application-profile profile-name;
            dscp (alias | bits);
            forwarding-class class-name;
            reflexive; | revert; | reverse { 
                application-profile profile-name;
                dscp (alias | bits);
                forwarding-class class-name;
            }
        }
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit services cos]

Description

Configure a services CoS rule, which specifies Differentiated Services (DiffServ) code point (DSCP) marking and forwarding-class assignment for packets that are processed by a service set. The CoS rule identifies the matching conditions for packet source and destination addresses and for packet applications, and the actions to take on those packets.

The service set that the CoS rule is assigned to must include at least one stateful firewall rule or NAT rule, or CoS does not work. Only stateful firewall and NAT rules can be used with CoS rules in a service set.

Options

match-direction (input | input-output | output)

The direction in which the rule is matched.

input	Apply the rule match on input. If the CoS rule is assigned to an interface service set, input means traffic entering the interface. If the CoS rule is assigned to a next-hop service set, input means traffic routed with the inside interface.
input-output	Apply the rule match in both directions.
output	Apply the rule match on output. If the CoS rule is assigned to an interface service set, input means traffic leaving the interface. If the CoS rule is assigned to a next-hop service set, output means traffic routed with the outside interface.

rule-name

Name of the CoS rule.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.3R2.

arrow_backward PREVIOUS rule (Services CoS)

NEXT arrow_forward rule (Services NAT)

Junos CLI Reference

ON THIS PAGE

rule (Services CoS Next Gen Services)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

rule (Services CoS Next Gen Services)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch