---
title: "policy"
slug: "cli-sc-policy"
updated: 2025-07-01T07:43:33Z
published: 2025-09-03T14:12:28Z
canonical: "docs.crossworkassurance.cisco.com/cli-sc-policy"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.crossworkassurance.cisco.com/llms.txt
> Use this file to discover all available pages before exploring further.

# policy

## policy add

policy add - Create a policy instance on a port or on a VCA classification

**Description:** This command defines the traffic filter and the action associated with an access policy.

**Syntax:**

```
  policy add <name> {
        { action [drop | permit]} |
        { filter {l2 | ipv4 | ipv6} <filter-name>} |
        { port <port-name>} |
        { state [enable | disable]} |
        { evc-encapsulation {none | push | pop}}
        { evc-ethertype {c-vlan | s-vlan | t-vlan} |
        { evc-vlan-id <0-4095>} |
        { evc-cfi <0-1>} |
        { evc-pcp <0-7>} |
        { priority <0-255>} |
        { vca <vca-name>} |
        { classification <classification-name>}}+

  <name>                = <string>
  <port-name>           = <string>
  <filter-name>         = <string>
  <vca-name>            = <string>
  <classification-name> = <string>
```

**Parameters:**

| Parameter | Description |
| --- | --- |
| action | Drop or not the traffic based on the filter. |
| filter | Specify an associated filter type and name. |
| port | Specify on which port this policy applies to. |
| state | Enable or disable policy on the port. |
| evc-encapsulation | Ethernet Virtual Connection encapsulation. Possible values are: - push: Add VLAN tag. - pop: Remove outer VLAN tag. - none: No tags are added or removed from the incoming frames. |
| evc-ethertype | EtherType to use in the VLAN tag. Applies only if evc-encapsulation is set to push. |
| evc-vlan-id | VLAN ID in the VLAN tag. Applies only if evc-encapsulation is set to push. |
| evc-cfi | Direct or default CFI/DEI bit for outgoing traffic. Applies only if evc-encapsulation is set to push. |
| evc-pcp | Direct or default PCP bits for outgoing traffic. Applies only if evc-encapsulation is set to push. |
| priority | Policy priority inside the remote device policies list. Use 0 when the priority is not used. |
| vca | Specify on which VCA this policy applies to. |
| classification | Specify on which VCA's classification this policy applies to. |

## policy delete

policy delete - Delete a policy instance

**Description:** Delete an existing policy instance.

**Syntax:**

```
  policy delete <name>

  <name>        = <string>
```

**Parameters:**

| Parameter | Description |
| --- | --- |
| name | Instance name of policy to be deleted. |

## policy edit

policy edit - Modify a policy instance on a port or on a VCA classification

**Description:** This command defines the traffic filter and the action associated with an access policy.

**Syntax:**

```
  policy edit <name> {
        { action [drop | permit]} |
        { filter {l2 | ipv4} <filter-name>} |
        { name <policy-name>} |
        { state [enable | disable]}
        { evc-encapsulation {none | push | pop}}
        { evc-ethertype {c-vlan | s-vlan | t-vlan} |
        { evc-vlan-id <0-4095>} |
        { evc-cfi <0-1>} |
        { evc-pcp <0-7>} |
        { priority <0-255>} |
        { classification <classification-name>}}+

  <name>                = <string>
  <policy-name>         = <string>
  <filter-name>         = <string>
  <classification-name> = <string>
```

**Parameters:**

| Parameter | Description |
| --- | --- |
| action | Drop or not the traffic based on the filter. |
| filter | Specify an associated filter type and name. |
| name | Policy name. |
| state | Enable or disable policy on the port. |
| evc-encapsulation | Ethernet Virtual Connection encapsulation. Possible values are: - push: Add VLAN tag. - pop: Remove outer VLAN tag. - none: No tags are added or removed from the incoming frames. |
| evc-ethertype | EtherType to use in the VLAN tag. Applies only if evc-encapsulation is set to push. |
| evc-vlan-id | VLAN ID in the VLAN tag. Applies only if evc-encapsulation is set to push. |
| evc-cfi | Direct or default CFI/DEI bit for outgoing traffic. Applies only if evc-encapsulation is set to push. |
| evc-pcp | Direct or default PCP bits for outgoing traffic. Applies only if evc-encapsulation is set to push. |
| priority | Policy priority inside the remote device policies list. Use 0 when the priority is not used. |
| classification | Specify on which VCA's classification this policy applies to. |

## policy show action

policy show action - Show policies evc actions and mappings

**Description:** Display policies evc actions and mappings.

**Syntax:**

```
policy show action
```

## policy show configuration

policy show configuration - Show policy configuration

**Description:** Display policy configuration. If a policy-id is specified, detailed policy configuration is displayed, otherwise a configuration summary is displayed in a table format.

**Syntax:**

```
  policy show configuration [<name>]

  <name> - <string>
```

**Parameters:**

| Parameter | Description |
| --- | --- |
| name | Policy name. |

**Output:**

```
policy show configuration
Policies configuration
Policy Name                     State    Action  VCA Filter name                     Type  Port Name                       Priority
------------------------------- -------- ------- --- ------------------------------- ----- ------------------------------- --------
vca_based                    Enabled  Permit  Yes   catchAll                         L2    C403-9811-UNI 
legacy                           Enabled  Permit  No    *default                         L2    C403-9811-NNI    

policy show configuration new
Policy new on P100-0467-UNI
State : Enabled
Action : Permit
Filter type : ---
Filter name : ---
VCA : VCA-New
Classification : new
EVC mapping :
Encapsulation : ---
Ethertype : ---
VLAN ID : ---
CFI : ---
PCP : ---
Priority : ---
```

**© 2026 Cisco and/or its affiliates. All rights reserved.** For more information about trademarks, please visit: [Cisco trademarks](https://www.cisco.com/c/en/us/about/legal/trademarks.html)[](https://www.cisco.com/c/en/us/about/legal/trademarks.html) For more information about legal terms, please visit: [Cisco legal terms](https://www.cisco.com/c/en/us/about/legal/terms-conditions.html)