This figure provides an example of where you might apply rules and P H B groups.

Classification rules are applied at the branch site C E device to classify and mark outbound traffic before it enters the core network or at the P E device in the core network when there is no managed C E in the ethernet-connected site.

Access rules are applied at the Internet Gateway site C E device to restrict access from the internet.

PHB group queuing mechanisms are applied at the P E devices in the core network to regulate core network traffic.

Policing rules are applied at the core network P E device and the connected branch site C E device to regulate the traffic load on the C E site and enforce the service package's bandwidth restrictions.