REPORT_GRANULARITY_TYPE_UNKNOWN REPORT_GRANULARITY_TYPE_SESSION REPORT_GRANULARITY_TYPE_FLOW STATE_DISABLED STATE_ENABLED FILTER_OPERATION_TYPE_UNKNOWN FILTER_OPERATION_TYPE_NOMATCH FILTER_OPERATION_TYPE_MATCH GATE_STATUS_TYPE_UNKNOWN GATE_STATUS_TYPE_ENABLED GATE_STATUS_TYPE_DISABLED RULE_PROTOCOL_TYPE_UNKNOWN RULE_PROTOCOL_TYPE_ANY RULE_PROTOCOL_TYPE_TCP RULE_PROTOCOL_TYPE_UDP L2_ENDPOINT_TYPE_UNKNOWN L2_ENDPOINT_TYPE_DISABLED L2_ENDPOINT_TYPE_VLAN Gets a list of all policies. Creates a set of PEM policies. Deletes the specified policies. Deletes all user defined policies. Sets the states indicating if the specified policies are enabled or disabled. Gets the states indicating if the specified policies are enabled or disabled. Sets the descriptions for a set of policies. Gets the descriptions for a set of policies. Gets a set of rules for the specified policies. A set of rules form a policy. These rules are used to match traffic flow and apply actions. A rule has filters and actions configuration. All configured filters must match before the actions can be applied to the traffic flow. Adds a set of rules for the specified policies. Removes a set of rules for the specified policies. Removes all rules for the specified policies. Sets the forwarding endpoints for the specified rules. A forwarding endpoint specifies where to send the traffic. Gets the forwarding endpoints for the specified rules. Sets the QoS rate for Peak Information Rate (PIR) in downlink traffic for the specified rules. This specifies the configured bandwidth control policy for Peak Information Rate (PIR) to apply to downlink traffic that matches this rule. An empty string specifies that there is no QoS rate for PIR in downlink traffic for this rule. Gets the QoS rate for Peak Information Rate (PIR) in downlink traffic for the specified rules. Sets the QoS rate for Peak Information Rate (PIR) in uplink traffic for the specified rules. This specifies the configured bandwidth control policy for Peak Information Rate (PIR) to apply to uplink traffic that matches this rule. An empty string specifies that there is no QoS rate for PIR in uplink traffic for this rule. Gets the QoS rate for Peak Information Rate (PIR) in uplink traffic for the specified rules. Sets the QoS rate control sub-policies in downlink traffic for the specified rules. A sub-policy specifies a category in downlink traffic within the bandwidth control policy; the rule is applied to the specified category. This option provides more specific rate control to a certain type in downlink traffic. The category must be defined in the specified bandwidth control policy. The default value is Disabled, meaning that rate control applies to all downlink traffic that matches the rule. Gets the QoS rate control sub-policies in downlink traffic for the specified rules. Sets the QoS rate control sub-policies in uplink traffic for the specified rules. A sub-policy specifies a category in uplink traffic within the bandwidth control policy; the rule is applied to the specified category. This option provides more specific rate control to a certain type in uplink traffic. The category must be defined in the specified bandwidth control policy. The default value is Disabled, meaning that rate control applies to all uplink traffic that matches the rule. Gets the QoS rate control sub-policies in uplink traffic for the specified rules. Sets the service chains for the rules. The service chain is essentially a list of endpoints for traffic to stop at on its way to the server it is headed to. Gets the service chains for the specified rules. Sets the intercepts for the specified rules. An intercept specifies the traffic that subscribers are trying to send. Gets the intercepts for the specified rules. Sets the HSL format scripts for the specified rules. An HSL format script allows you to report usage data to an external analytics server. Gets the HSL format scripts for the specified rules. Sets the HSL endpoints for the specified rules. An HSL endpoint specifies the server or pool of remote HSL servers to send the logs. Gets the HSL endpoints for the specified rules. Sets the http redirects for the specified rules. An http redirect specifies the URL where the traffic affected by this rule should be redirected to. The default value is empty string (no http redirect). Gets the http redirects for the specified rules. Sets the Gx monitoring keys for the specified rules. The Gx monitoring key is used for usage monitoring of the service data that the enforcement policy rule or dynamic policy and charging control (PCC) rule controls. Gets the Gx monitoring keys for the specified rules. Sets the report granularity types for the specified rules. The default value is session. Gets the report granularity types for the specified rules. Sets the gate status states for the specified rules. This specifies whether the traffic passes through the system. If gate status is enabled, then the traffic passes through the system. If gate status is disabled, then the traffic is not allowed to pass through. The default value is enabled. Gets the gate status states for the specified rules. Sets the precedences for the specified rules. A precedence specifies the precedence for the rule in relation to the other rules. The range is 1 to 4294967295 where 1 has the highest precedence. A rule with higher precedence is evaluated before other rules with lower precedence. It is mandatory to specify precedence when creating a rule in a policy. Gets the precedences for the specified rules. Sets the volume threshold, in total octets, for the specified rules. The report is generated if the amount of total octets exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: octets uplink, octets downlink, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, octets uplink volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when octets uplink reach 8, and when total octets reach 10. Gets the volume total octets for the specified rules. Sets the volume threshold in uplink traffic, in octets, for the specified rules. The report is generated if the amount of octets in uplink traffic exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the volume threshold in uplink traffic, in octet, for the specified rules. Sets the volume threshold in downlink traffic, in octets, for the specified rules. The report is generated if the amount of octets in downlink traffic exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the volume threshold in downlink traffic, in octets, for the specified rules. Sets the intervals for the specified rules. An interval specifies the time interval in seconds when the report is generated. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the intervals for the specified rules. Sets the L2 marking levels in downlink traffic for the specified rules. This sets Layer-2 Quality of Service Marking in downlink traffic that matches a rule. Setting an L2 QoS Marking affects the packet delivery priority. The range is 0 to 7, or pass-through (value 8). The default value is pass-through, indicating the L2 QoS Marking of the packet will not be changed when the packet matches the rule. Gets the L2 marking levels in downlink traffic for the specified rules. Sets the L2 marking levels in uplink traffic for the specified rules. This sets Layer-2 Quality of Service Marking in uplink traffic that matches a rule. Setting an L2 QoS marking affects the packet delivery priority. The range is 0 to 7, or pass-through (value 8). The default value is pass-through, indicating the L2 QoS Marking of the packet will not be changed when the packet matches the rule. Gets the L2 marking levels in uplink traffic for the specified rules. Sets the types of DSCP markings in downlink traffic for the specified rules. This specifies the action to modify the DSCP code in the downlink packet when the traffic flow matches the rule matching criteria. The range is 0 to 63, or pass-through (value 64). The default value is pass-through, indicating the DSCP code of the downlink packet will not be changed when the traffic flow matches the rule. Gets the types of DSCP markings in downlink traffic for the specified rules. Sets the types of DSCP markings in uplink traffic for the specified rules. This specifies the action to modify the DSCP code in the uplink packet when the traffic flow matches the rule matching criteria. The range is 0 to 63, or pass-through (value 64). The default value is pass-through, indicating the DSCP code of the uplink packet will not be changed when the traffic flow matches the rule. Gets the types of DSCP markings in uplink traffic for the specified rules. Sets the tcl-filters for the specified rules. A tcl-filter specifies the tcl expression which uses iRule commands to filter the packet. It is a match if tcl-filter returns TRUE/1 or nomatch if FALSE/0. All configured filters (flow-info-filters, classification-filters, and tcl-filter) must match before rule actions are applied. For example, to classify traffic as xxx_app, a custom classification application that you created, you can use this iRule: when HTTP_REQUEST { if { [HTTP::header "Host"] contains "xxx" } { CLASSIFY::application set xxx_app } } Gets the tcl-filters for the specified rules. Gets a set of classification filters for the specified rules. Adds a set of classification filters for the specified rules. No more than 100,000 entries is supported in one call. For example, 100 policies, each policy has 100 rules, and each rule has 10 classification filters, then there are total 100,000 filters. If there are more than 100,000 entries, call this function more than once. Removes a set of classification filters for the specified rules. Removes all classification filters for the specified rules. Sets the applications for the specified classification filters. This specifies the application that the rule applies to the traffic. The default value is empty string (no application). Gets the applications for the specified classification filters. Sets the categories for the specified classification filters. This specifies the category of applications where the rule applies to the traffic. The default value is empty string (no category). Gets the categories for the specified classification filters. Sets the filter operation types for the specified classification filters. A filter operation type specifies whether the rule applies to traffic that matches (match) or does not match (nomatch) the traffic flow defined here. The options are match and nomatch. The default value is match. Gets the filter operation types for the specified classification filters. Gets a set of flow info filters for the specified rules. The flow info filter defines the flow conditions (Layer 4) that the traffic should meet (or not meet) for this enforcement policy rule to apply. Adds a set of flow info filters for the specified rules. No more than 100,000 entries is supported in one call. For example, 100 policies, each policy has 100 rules, and each rule has 10 flow info filters, then there are total 100,000 filters. If there are more than 100,000 entries, call this function more than once. Removes a set of flow info filters for the specified rules. Removes all flow info filters for the specified rules. Sets the from-vlans for the specified flow info filters. A from-vlan specifies the name of the source vlan to match the ingress flow arriving from that vlan. Gets the from-vlans for the specified flow info filters. Sets the filter operation types for the specified flow info filters. A filter operation type specifies whether the rule applies to traffic that matches (match) or does not match (nomatch) the traffic flow defined here. The options are match and nomatch. The default value is match. Gets the filter operation types for the specified flow info filters. Sets the source IP address/netmasks for the specified flow info filters. They specify the source IP address/netmask of the network you want the rule to affect. The default value is 0.0.0.0/0. Gets the source IP address/netmasks for the specified flow info filters. Sets the source ports for the specified flow info filters. A source port specifies the source port of the network you want the rule to affect. The default value is any (value 0). Gets the source ports for the specified flow info filters. Sets the destination IP address/netmasks for the specified flow info filters. They specify the destination IP address/netmask of the network you want the rule to affect. The default value is 0.0.0.0/0. Sets the source IP address/netmasks and destination IP address/netmasks for the specified flow info filters. If either source or destination address family needs to be changed, this method provides a convenient way to change both. This method is a convenience to allow you to avoid using a transaction, because both source IP and destination IP must be the same type, either both IPv4 or both IPv6. (Either a transaction or this method are good ways of satisfying this validation). Gets the destination IP address/netmasks for the specified flow info filters. Sets the destination ports for the specified flow info filters. A destination port specifies the destination port of the network you want the rule to affect. The default value is any (value 0). Gets the destination ports for the specified flow info filters. Sets the L2 endpoint (vlan tag) types for the specified flow info filters. The default value is disabled. Gets the L2 endpoint types for the specified flow info filters. Sets the DSCP code types for the specified flow info filters. A DSCP code specifies the value of DSCP code which matches incoming traffic based on a value in the DSCP field in the IP header. The range is 0 to 63, or disabled (value 64). The default value is disabled, indicating that the DSCP code will not be used to filter the packet in the flow info filter. Gets the DSCP codes for the specified flow info filters. Sets the protocol types for the specified flow info filters. A protocol type specifies the protocol that this rule applies to. The options are any, tcp, and udp. The default value is any. Gets the protocol types for the specified flow info filters. Gets the version information for this interface. Gets a list of all policies. Creates a set of PEM policies. Deletes the specified policies. Deletes all user defined policies. Sets the states indicating if the specified policies are enabled or disabled. Gets the states indicating if the specified policies are enabled or disabled. Sets the descriptions for a set of policies. Gets the descriptions for a set of policies. Gets a set of rules for the specified policies. A set of rules form a policy. These rules are used to match traffic flow and apply actions. A rule has filters and actions configuration. All configured filters must match before the actions can be applied to the traffic flow. Adds a set of rules for the specified policies. Removes a set of rules for the specified policies. Removes all rules for the specified policies. Sets the forwarding endpoints for the specified rules. A forwarding endpoint specifies where to send the traffic. Gets the forwarding endpoints for the specified rules. Sets the QoS rate for Peak Information Rate (PIR) in downlink traffic for the specified rules. This specifies the configured bandwidth control policy for Peak Information Rate (PIR) to apply to downlink traffic that matches this rule. An empty string specifies that there is no QoS rate for PIR in downlink traffic for this rule. Gets the QoS rate for Peak Information Rate (PIR) in downlink traffic for the specified rules. Sets the QoS rate for Peak Information Rate (PIR) in uplink traffic for the specified rules. This specifies the configured bandwidth control policy for Peak Information Rate (PIR) to apply to uplink traffic that matches this rule. An empty string specifies that there is no QoS rate for PIR in uplink traffic for this rule. Gets the QoS rate for Peak Information Rate (PIR) in uplink traffic for the specified rules. Sets the QoS rate control sub-policies in downlink traffic for the specified rules. A sub-policy specifies a category in downlink traffic within the bandwidth control policy; the rule is applied to the specified category. This option provides more specific rate control to a certain type in downlink traffic. The category must be defined in the specified bandwidth control policy. The default value is Disabled, meaning that rate control applies to all downlink traffic that matches the rule. Gets the QoS rate control sub-policies in downlink traffic for the specified rules. Sets the QoS rate control sub-policies in uplink traffic for the specified rules. A sub-policy specifies a category in uplink traffic within the bandwidth control policy; the rule is applied to the specified category. This option provides more specific rate control to a certain type in uplink traffic. The category must be defined in the specified bandwidth control policy. The default value is Disabled, meaning that rate control applies to all uplink traffic that matches the rule. Gets the QoS rate control sub-policies in uplink traffic for the specified rules. Sets the service chains for the rules. The service chain is essentially a list of endpoints for traffic to stop at on its way to the server it is headed to. Gets the service chains for the specified rules. Sets the intercepts for the specified rules. An intercept specifies the traffic that subscribers are trying to send. Gets the intercepts for the specified rules. Sets the HSL format scripts for the specified rules. An HSL format script allows you to report usage data to an external analytics server. Gets the HSL format scripts for the specified rules. Sets the HSL endpoints for the specified rules. An HSL endpoint specifies the server or pool of remote HSL servers to send the logs. Gets the HSL endpoints for the specified rules. Sets the http redirects for the specified rules. An http redirect specifies the URL where the traffic affected by this rule should be redirected to. The default value is empty string (no http redirect). Gets the http redirects for the specified rules. Sets the Gx monitoring keys for the specified rules. The Gx monitoring key is used for usage monitoring of the service data that the enforcement policy rule or dynamic policy and charging control (PCC) rule controls. Gets the Gx monitoring keys for the specified rules. Sets the report granularity types for the specified rules. The default value is session. Gets the report granularity types for the specified rules. Sets the gate status states for the specified rules. This specifies whether the traffic passes through the system. If gate status is enabled, then the traffic passes through the system. If gate status is disabled, then the traffic is not allowed to pass through. The default value is enabled. Gets the gate status states for the specified rules. Sets the precedences for the specified rules. A precedence specifies the precedence for the rule in relation to the other rules. The range is 1 to 4294967295 where 1 has the highest precedence. A rule with higher precedence is evaluated before other rules with lower precedence. It is mandatory to specify precedence when creating a rule in a policy. Gets the precedences for the specified rules. Sets the volume threshold, in total octets, for the specified rules. The report is generated if the amount of total octets exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: octets uplink, octets downlink, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, octets uplink volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when octets uplink reach 8, and when total octets reach 10. Gets the volume total octets for the specified rules. Sets the volume threshold in uplink traffic, in octets, for the specified rules. The report is generated if the amount of octets in uplink traffic exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the volume threshold in uplink traffic, in octet, for the specified rules. Sets the volume threshold in downlink traffic, in octets, for the specified rules. The report is generated if the amount of octets in downlink traffic exceeds the threshold. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the volume threshold in downlink traffic, in octets, for the specified rules. Sets the intervals for the specified rules. An interval specifies the time interval in seconds when the report is generated. The default value is 0 which indicates this feature is disabled. If the reporting destination is set, at least one of the following reporting properties must be set to non-zero: uplink octets, downlink octets, total octets (sum of the previous two), and/or interval. If any one of these thresholds is met, the report will be generated. If multiple thresholds are met, reports will be generated for all of them. For example, if interval is set to 5 seconds, uplink octets volume threshold is set to 8, and total octets volume threshold is set to 10, then reports will be generated every 5 seconds, when uplink octets reach 8, and when total octets reach 10. Gets the intervals for the specified rules. Sets the L2 marking levels in downlink traffic for the specified rules. This sets Layer-2 Quality of Service Marking in downlink traffic that matches a rule. Setting an L2 QoS Marking affects the packet delivery priority. The range is 0 to 7, or pass-through (value 8). The default value is pass-through, indicating the L2 QoS Marking of the packet will not be changed when the packet matches the rule. Gets the L2 marking levels in downlink traffic for the specified rules. Sets the L2 marking levels in uplink traffic for the specified rules. This sets Layer-2 Quality of Service Marking in uplink traffic that matches a rule. Setting an L2 QoS marking affects the packet delivery priority. The range is 0 to 7, or pass-through (value 8). The default value is pass-through, indicating the L2 QoS Marking of the packet will not be changed when the packet matches the rule. Gets the L2 marking levels in uplink traffic for the specified rules. Sets the types of DSCP markings in downlink traffic for the specified rules. This specifies the action to modify the DSCP code in the downlink packet when the traffic flow matches the rule matching criteria. The range is 0 to 63, or pass-through (value 64). The default value is pass-through, indicating the DSCP code of the downlink packet will not be changed when the traffic flow matches the rule. Gets the types of DSCP markings in downlink traffic for the specified rules. Sets the types of DSCP markings in uplink traffic for the specified rules. This specifies the action to modify the DSCP code in the uplink packet when the traffic flow matches the rule matching criteria. The range is 0 to 63, or pass-through (value 64). The default value is pass-through, indicating the DSCP code of the uplink packet will not be changed when the traffic flow matches the rule. Gets the types of DSCP markings in uplink traffic for the specified rules. Sets the tcl-filters for the specified rules. A tcl-filter specifies the tcl expression which uses iRule commands to filter the packet. It is a match if tcl-filter returns TRUE/1 or nomatch if FALSE/0. All configured filters (flow-info-filters, classification-filters, and tcl-filter) must match before rule actions are applied. For example, to classify traffic as xxx_app, a custom classification application that you created, you can use this iRule: when HTTP_REQUEST { if { [HTTP::header "Host"] contains "xxx" } { CLASSIFY::application set xxx_app } } Gets the tcl-filters for the specified rules. Gets a set of classification filters for the specified rules. Adds a set of classification filters for the specified rules. No more than 100,000 entries is supported in one call. For example, 100 policies, each policy has 100 rules, and each rule has 10 classification filters, then there are total 100,000 filters. If there are more than 100,000 entries, call this function more than once. Removes a set of classification filters for the specified rules. Removes all classification filters for the specified rules. Sets the applications for the specified classification filters. This specifies the application that the rule applies to the traffic. The default value is empty string (no application). Gets the applications for the specified classification filters. Sets the categories for the specified classification filters. This specifies the category of applications where the rule applies to the traffic. The default value is empty string (no category). Gets the categories for the specified classification filters. Sets the filter operation types for the specified classification filters. A filter operation type specifies whether the rule applies to traffic that matches (match) or does not match (nomatch) the traffic flow defined here. The options are match and nomatch. The default value is match. Gets the filter operation types for the specified classification filters. Gets a set of flow info filters for the specified rules. The flow info filter defines the flow conditions (Layer 4) that the traffic should meet (or not meet) for this enforcement policy rule to apply. Adds a set of flow info filters for the specified rules. No more than 100,000 entries is supported in one call. For example, 100 policies, each policy has 100 rules, and each rule has 10 flow info filters, then there are total 100,000 filters. If there are more than 100,000 entries, call this function more than once. Removes a set of flow info filters for the specified rules. Removes all flow info filters for the specified rules. Sets the from-vlans for the specified flow info filters. A from-vlan specifies the name of the source vlan to match the ingress flow arriving from that vlan. Gets the from-vlans for the specified flow info filters. Sets the filter operation types for the specified flow info filters. A filter operation type specifies whether the rule applies to traffic that matches (match) or does not match (nomatch) the traffic flow defined here. The options are match and nomatch. The default value is match. Gets the filter operation types for the specified flow info filters. Sets the source IP address/netmasks for the specified flow info filters. They specify the source IP address/netmask of the network you want the rule to affect. The default value is 0.0.0.0/0. Gets the source IP address/netmasks for the specified flow info filters. Sets the source ports for the specified flow info filters. A source port specifies the source port of the network you want the rule to affect. The default value is any (value 0). Gets the source ports for the specified flow info filters. Sets the destination IP address/netmasks for the specified flow info filters. They specify the destination IP address/netmask of the network you want the rule to affect. The default value is 0.0.0.0/0. Sets the source IP address/netmasks and destination IP address/netmasks for the specified flow info filters. If either source or destination address family needs to be changed, this method provides a convenient way to change both. This method is a convenience to allow you to avoid using a transaction, because both source IP and destination IP must be the same type, either both IPv4 or both IPv6. (Either a transaction or this method are good ways of satisfying this validation). Gets the destination IP address/netmasks for the specified flow info filters. Sets the destination ports for the specified flow info filters. A destination port specifies the destination port of the network you want the rule to affect. The default value is any (value 0). Gets the destination ports for the specified flow info filters. Sets the L2 endpoint (vlan tag) types for the specified flow info filters. The default value is disabled. Gets the L2 endpoint types for the specified flow info filters. Sets the DSCP code types for the specified flow info filters. A DSCP code specifies the value of DSCP code which matches incoming traffic based on a value in the DSCP field in the IP header. The range is 0 to 63, or disabled (value 64). The default value is disabled, indicating that the DSCP code will not be used to filter the packet in the flow info filter. Gets the DSCP codes for the specified flow info filters. Sets the protocol types for the specified flow info filters. A protocol type specifies the protocol that this rule applies to. The options are any, tcp, and udp. The default value is any. Gets the protocol types for the specified flow info filters. Gets the version information for this interface. The Policy interface enables you to work with attributes for policies. You can use this policy component to configure the policy definitions on the Policy Enforcement Manager. A policy is a set of rules which are used to match traffic flow and apply actions. A rule has filters and actions configuration. All configured filters must match before the actions can be applied to the traffic flow.