Add QoS Policy Rules
Table of Contents
Add QoS Policy Rules
Learn how to add the QoS policy rules in Prisma SD-WAN.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
QoS or Priority Policy Rules are contained
within a QoS set. QoS policy rules determine application priority within
a network. They include attributes such as network context, QoS
prefixes, application, priority, and DSCP for an application.
- Network context—Network context segments network traffic for the purpose of applying different QoS policy rules for the same application. This gets the highest order of precedence.
- Source prefix filter—Source based attributes get precedence over destination based attributes. Source prefix filters are often added as exceptions, so these get a higher precedence over applications.
- Applications—These are destination based, hence lower in the order of precedence.
- Destination prefix filter—These are often added in context of an application, so destination prefix filters get lower precedence than applications.
- Priority—Priority determines the relative priority of network resources assigned to each application.
- DSCP Values - When policy rules with marked DSCP bits are applied to a site, the ION branch device will honor the bits in the first packet on an unknown application flow, and queue the flow in the specified priority class.
QoS policy rules
are added to the QoS policy sets.
- Select .Select a QoS set and Add Rule.On the Info tab, enter a Name for the policy rule.Enter an Order number.The default order number for a policy rule is 1024. .(Optional) Enter Description and Tags for the policy rule.Click Next.Select a Network Context on the Network Context tab and click Next.You can add a new network context by clicking Add.Select a Source Prefix and a Destination Prefix on the Prefixes tab.For information on prefixes, see Configuring Prefixes.Click Next.Select applications to apply the policy rule on the Apps tab and click Next.The number of applications for a policy rule is limited to 256.You can filter applications based on:
- For sites 6.0.1 or above—Select this option to view system applications from PANW, applications common to PANW and Prisma SD-WAN, and custom applications defined in Prisma SD-WAN.
- For sites below 6.0.1—Select this option to view legacy system applications in Prisma SD-WAN, applications common to PANW and Prisma SD-WAN, and custom applications defined in Prisma SD-WAN.
- For any site—Use this option to view applications common to PANW and Prisma SD-WAN along with custom applications defined in Prisma SD-WAN.
(Optional) You can check the type of application - System (PANW, CGX), System (CGX), or Custom by selecting the application first and then using the filters to view the type of application.Choose a priority on the Priority tab and click Next.For more information on priorities, see Configure Circuit Capacities.Select an action from the DSCP drop-down on the DSCP tab.If you choose:- No Action—DSCP marking in the packet is not modified.
- Mark/Remark—Select a value between 0-63 from the drop-down. If a DSCP value is specified and a flow matches this rule in the LAN to WAN direction, all packets belonging to this flow is changed to the DSCP value specified here. For more information on DSCP configuration, see Configure DSCP.
Click Next.Review the Summary of the policy rule.Save & Exit.You can sort QoS policy rules based on rules that are enabled, order of the rules, name, network context, source and destination prefixes, priority of the application, and the DSCP value. For policy rules in Path or QoS Stacks to be active, you need to bind Path or QoS Stacks to a site. A single Path or QoS Stack can be bound to a site at a time.You can bulk update or edit information for multiple QoS policy rules by selecting multiple policy rules and editing the required information.Information changed using bulk edit of policy rules overwrites the existing information of individual policy rules.