Page History

The SWVC End Point Policy Map specifies the Policies that are assigned to Application Flows and Application Flow Groups at the SWVC End Point. The value of the SWVC End Point Policy Map is a list of 2-tuples <app, pol> where:

• app is an Application Flow or Application Flow Group name
• pol is a Policy name

[R51] The app element in each entry in the value of the SWVC End Point Policy Map MUST be either:

• • an Application Flow Group name from the value of the SWVC List of Application Flow Groups Service Attribute (see section 8.6), or,
  • an Application Flow name from the value of the SWVC List of Application Flows Service Attribute (see section 8.7)

[R52] A specific value for the app element in the value of the SWVC End Point Policy Map MUST appear in, at most, one entry in the list.
[R53] The pol element in each entry in the value of the SWVC End Point Policy Map MUST be a Policy Name from the value of the SWVC List of Policies Service Attribute (see section 8.5)

In order for an Application Flow to be forwarded at an SWVC End Point, it must have an assigned Policy. This can happen in two ways:

• The Application Flow can be a member of an Application Flow Group that has an assigned Policy at the SWVC End Point, or,
• The Application Flow, itself, can have an assigned Policy at the SWVC End Point.

[R54] If an Application Flow and the Application Flow Group in which the Application Flow is a member are both assigned a Policy at an SWVC End Point, the Policy assigned to the Application Flow MUST be used for the Application Flow.
[R54] notes that a Policy associated, explicitly, with an Application Flow overrides any Policy association for the Application Flow Group to which that Application Flow is a member.
[R55] If an Application Flow is not assigned a Policy at an SWVC End Point in the SWVC End Point Policy Map and is not a member of an Application Flow Group that is as-signed a Policy at that SWVC End Point, Ingress IP Packets mapped to the Application Flow MUST be discarded at that SWVC End Point.
[R56] If an Application Flow is assigned the reserved Policy name block at an SWVC End Point in the SWVC End Point Policy Map, either explicitly or through membership in an Application Flow Group, Ingress IP Packets mapped to the Application Flow MUST be discarded at the SWVC End Point.

In order to block (blacklist) an Application Flow that is a member of an Application Flow Group that has an assigned Policy, the Application Flow is assigned the reserved Policy block (see section 8.5).

Note that blocking/blacklisting an Application Flow (either by not having a Policy assigned or by explicit assignment of the reserved Policy, block, only refers to Ingress IP Packets. Egress IP Packets (i.e., IP Packets that were forwarded from other UNIs) are delivered to the UNI for these Application Flows.