Vyatta Network OS Documentation

Learn how to install, configure and operate the Vyatta NOS, which helps drive our virtual networking & physical platforms portfolio.

security firewall name <name> rule <rule-number> pcp <number>

Specifies the 802.1 Priority Code Point (PCP) to match for a firewall rule.

set security firewall name name rule rule-number pcp pcp-number
delete security firewall name name rule rule-number pcp
show security firewall name name rule rule-number pcp
name
The name of a firewall rule set.
rule-number
The numeric identifier of a rule. The identifier ranges from 1 through 9999.
pcp pcp-number
The 802.1 priority-code point number. The number can range from 0 through 7.

Configuration mode


security {
    firewall {
        name name {
            rule rule-number {
                pcp pcp-number
            }
        }
    }
}

Use the set form of this command to define the PCP within a firewall rule.

The following notes apply to PCP matching and marking:

  • Matching on PCP for a firewall rule should be done only in the "in" direction in L2, because the PCP of a forwarded packet is cleared.
  • Marking of the PCP value on outgoing packets in a firewall rule can be done only for bridging (in the L2 direction).
  • If a PCP setting is required for routed packets, QoS must be used. Refer to the Ciena Vyatta Network OS QoS Configuration Guide for more information.

Use the delete form of this command to delete the PCP within a firewall rule.

Use the show form of this command to display the PCP within a firewall rule.