security firewall name <name> rule <rule-number> pcp <number>

Specifies the 802.1 Priority Code Point (PCP) to match for a firewall rule.

set security firewall name name rule rule-number pcp pcp-number

delete security firewall name name rule rule-number pcp

show security firewall name name rule rule-number pcp

name: The name of a firewall rule set.
rule-number: The numeric identifier of a rule. The identifier ranges from 1 through 9999.
pcp pcp-number: The 802.1 priority-code point number. The number can range from 0 through 7.

Configuration mode


security {
    firewall {
        name name {
            rule rule-number {
                pcp pcp-number
            }
        }
    }
}

Use the set form of this command to define the PCP within a firewall rule.

The following notes apply to PCP matching and marking:

Matching on PCP for a firewall rule should be done only in the "in" direction in L2, because the PCP of a forwarded packet is cleared.
Marking of the PCP value on outgoing packets in a firewall rule can be done only for bridging (in the L2 direction).
If a PCP setting is required for routed packets, QoS must be used. Refer to the Ciena Vyatta Network OS QoS Configuration Guide for more information.

Use the delete form of this command to delete the PCP within a firewall rule.

Use the show form of this command to display the PCP within a firewall rule.

Vyatta documentation