Loading ...
Loading ...
Loading ...
Chapter 68 Classifier
XGS2220 Series User’s Guide
513
The following table describes the labels in this screen.
Table 268 SECURITY > ACL > Classifier > Classifier Setup > Add/Edit
LABEL DESCRIPTION
Active Enable the switch button to enable this rule.
Name Enter a descriptive name for this rule for identifying purposes. You can enter up to 32 printable ASCII
characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ].
Weight Enter a number between 0 and 65535 to specify the rule’s weight. When the match order is in manual
mode in the Classifier Global Setting screen, a higher weight means a higher priority.
Log Select this option to have the Switch create a log message when the rule is applied and record the
number of matched packets in a particular time interval.
Note: Make sure you also enable logging in the Classifier Global Setting screen.
Count Select this option to have the Switch count how many times the rule is applied.
Time
Range
Select the name of the pre-configured schedule that you want to apply to the rule. The rule will be
active only at the scheduled date and/or time.
If you select None, the rule will be active all the time.
Ingress Port
Port Type the port number to which the rule should be applied. You may choose one port only or all ports
(Any).
You can enter multiple ports separated by (no space) comma (,) or hyphen (-) for a range. For
example, enter “3-5” for ports 3, 4, and 5. Enter “3,5,7” for ports 3, 5, and 7.
In Stacking mode, the first number represents the slot and the second the port number. Enter 1/1-1/
24,2/23 for ports 1 to 24 for the Switch in slot 1 and port 23 for the Switch in slot 2, for example.
Trunk Select Any to apply the rule to all trunk groups.
Alternatively, to specify multiple trunks, enter the trunk group ID to apply the rule to multiple trunks.
You can enter multiple trunks with (t) or (T) then the trunk group ID separated by (no space) comma
(,) or hyphen (-). For example, enter “t3-t5” for trunks 3, 4, and 5. Enter “T3,T5,T7” for trunks 3, 5, and 7.
Layer 2
Specify the fields below to configure a layer 2 classifier.
VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source VLAN
ID in the field provided.
Priority Select Any to classify traffic from any priority level or select the second option and specify a priority
level in the field provided.
Ethernet
Type
Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value.
Source
MAC
Address
Select Any to apply the rule to all MAC addresses.
To specify a source, select MAC/Mask to enter the source MAC address of the packet in valid MAC
address format (six hexadecimal character pairs) and type the mask for the specified MAC address to
determine which bits a packet’s MAC address should match.
Enter “f” for each bit of the specified MAC address that the traffic’s MAC address should match. Enter
“0” for the bits of the matched traffic’s MAC address, which can be of any hexadecimal characters.
For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet
with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the Mask field blank, the
Switch automatically sets the mask to ff:ff:ff:ff:ff:ff.
Loading ...
Loading ...
Loading ...