ZyXEL Communications VES-1616 manual Classifier & Policy rule setup on your Switch

ZyXEL VES-1616/24FA-5x Series Support Notes

After the configuration, the port is authenticated and the computer connected to this port is allowed to access the network. Otherwise, the computer cannot access the network.

Classifier & Policy rule setup on your Switch

This section shows you how to allow traffic from certain IP addresses and deny others. This can be done easily using classifier and policy rules.

First, you need to create a classifier rule to group traffic into data flows based on information such as the source address, destination address, port number and packet format. In this example, we group traffic based on the packet format and set the VES-1616F-3X to apply its policy rules. The following lists the three classifier rules that we will define in this example:

1.Packet with a source IP address of 192.168.1.20

2.Packets on port 2

3.ARP traffic for testing

Once packet classification settings are done, we create policy rules to specify the actions on the matched packets so they get the deserved treatment in the network. Here, we also define three policy rules.

1.Forward traffic from 192.168.1.20 only (on the first classifier)

2.Discard all the traffic from port 2 (on the second classifier)

3.Forward ARP packets (on the third classifier)

All contents copyright 2008 ZyXEL Communications Corporation. 102