On SAP ingress, users have an option to use either MAC criteria or IP criteria, or both IPv4 and MAC criteria. To use the available classification resources effectively, the following options are available:
supported MAC header fields using the mac-criteria any option
only dot1p bits in the MAC header using the mac-criteria dot1p-only option
supported IPv4 header fields using the ip-criteria any option
only IPv4 DSCP in the IPv4 header using the ip-criteria dscp-only option
supported IPv6 header fields using the ipv6-criteria any option
only IPv6 DSCP bits in the IPv6 header using the ipv6-criteria dscp-only option
both MAC and IPv4 header fields using the both MAC and IPv4 criteria option together in a policy (this option is supported only on 7210 SAS-D and 7210 SAS-Dxp)
Among the above supported criteria the following can be configured together in a single policy:
mac-criteria any
mac-criteria dot1p-only
ip-criteria any and ipv6-criteria any or ipv6-criteria dscp-only
ipv6-criteria dscp-only and ipv6-criteria any or ipv6-criteria dscp-only
mac-criteri any and ip-criteria any or ip-criteria dscp-only or ipv6-criteria dscp-only (this option is supported only on 7210 SAS-D and 7210 SAS-Dxp)
mac-criteria dot1p-only and ip-criteria any or ip-criteria dscp-only or ipv6-criteria dscp-only (this option is supported only on 7210 SAS-D and 7210 SAS-Dxp)
When specifying both MAC and IP criteria in a single SAP ingress policy, only IPv6 DSCP match is allowed. Other IPv6 fields such as src-address and dst-address are not allowed.
The available ingress CAM hardware resources from the ingress internal CAM pool can be allocated according to user needs for use with different QoS classification match criteria using the commands available under the CLI configure>system> resource-profile context. By default, the system allocates resources to SAP ingress classification on bootup. Users can change the resource allocation based on their need to scale the number of entries or number of associations (that is, the number of SAPs using a policy that uses a particular match criterion). If no resources are allocated to a particular match criteria used in the policy, the association of that policy to a SAP fails. Allocation of classification entries also allocates meter resources, used to implement the per FC per traffic type policing function. See Resource allocation for service ingress QoS policy classification rules for more information about resource usage and allocation to SAP ingress policies.
In addition to the preceding classification rules, the user has an option to use the DEI bit to identify the ingress profile and enable color-aware policing. See DEI-based classification and marking for more information.