This read-create object sets what action the switch takes at the ingress port toward cells or frames that violate this connection's policing contract: pass them through unchanged, tag and still drop under congestion, tag only, or drop outright. Choosing pass effectively disables policing enforcement for the connection even though a traffic contract is configured. A customer bursting well above their contracted CIR would see no visible drops with this set to pass, but would start losing excess traffic once it's changed to drop.