This read-create INTEGER (none/red/redYellow) selects the drop behavior for out-of-profile traffic under this metering profile: red drops only red-marked (most severely out-of-profile) packets belonging to the associated ACL group, while redYellow drops both red and yellow packets. An admin picks redYellow for a stricter profile that won't tolerate even moderately out-of-profile traffic during congestion. Choosing red on a lenient profile still lets yellow (mildly over-limit) traffic through, only discarding the worst offenders.