Firewall filters: Fine control over classification of CPU generated packets

Enables you to apply egress firewall filters to a loopback interface so that you can set the forwarding class and DSCP bit value for packets that originate on the switch itself. This feature gives you very fine control over the classification of CPU generated packets. For example, you might want to assign different DSCP values and forwarding classes to traffic generated by different routing protocols so that the traffic for those protocols can be treated in a differentiated manner by other devices.