Access ID, Replace Dscp, Source IP | Allied Telesis AT-9724TS

Figure 6- 65.Access Rule Configuration window (IP)

Configure the following Access Rule Configuration settings for IP:

Parameter	Description
Profile ID	This is the identifier number for this profile set.
Mode	Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according
	to any additional rule added (see below).
	Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and
Access ID	will be filtered.
	Type in a unique identifier number for this access.This value can be set from 1-50.
Type	Selected profile based on Ethernet (MAC Address), IP address or Packet Content Mask.
	Ethernet instructs the Switch to examine the layer 2 part of each packet header.
	IP instructs the Switch to examine the IP address in each frame's header.
Priority (0-7)	Packet Content Mask instructs the Switch to examine the packet header.
	This parameter is specified if you want to re-write the 802.1p default priority previously set in the Switch,
	which is used to determine the CoS queue to which packets are forwarded to. Once this field is specified,
	packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by
	the user.
	Replace priority with – Click the corresponding box if you want to re-write the 802.1p default priority of a
	packet to the value entered in the Priority field, which meets the criteria specified previously in this
	command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming
	802.1p user priority re-written to its original value before being forwarded by the Switch. For more
Replace Dscp (0-63)	information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual.
	Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected
VLAN Name	criteria) with the value entered in the adjacent field.
	Allows the entry of a name for a previously configured VLAN.
Source IP	Enter an IP Address mask for the source IP address.
Destination IP	Enter an IP Address mask for the destination IP address.
Dscp (0-63)	This field allows the user to enter a DSCP value in the space provided, which will instruct the Switch to
	examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for
Protocol	forwarding.The user may choose a value between 0 and 63.
	This field allows the user to modify the protocol used to configure the Access Rule Table; depending on which
	protocol the user has chosen in the Access Profile Table.

To view the settings of a previously correctly configured rule, click View in the Access Rule Table to view the following screen:

Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch

80

Image 81

Allied Telesis AT-9724TS specifications Access ID, Replace Dscp, Source IP, Destination IP, Protocol

Contents

AT-9724TS Electrical Safety and Emission Statement Table of Contents RIP 133 Preface Purpose of This GuideHow This Guide is Organized Bold font Document Conventions European Support Numbers Regional Locations Returning Products FTP Server Tell Us What You Think Introduction Switching TechnologyEthernet Technology Fast Ethernet Gigabit Ethernet Technology Features Switch Description Ports Installing the SFP portsFront Panel Components RFC1493 Bridge LED Description LED IndicatorsRear Panel Components Side-Panel Components Package Contents InstallationInstalling the Switch without a Rack Before You Connect to the Network Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack Power On Mounting the Switch in a Standard 19 RackPower Failure External Redundant Power System Connecting the Switch Switch To End NodeSwitch to Hub or Switch Stacking and the AT-9724TS Connecting To Network Backbone or Server Stacking in a Ring Architecture Stacking Limitations Utilizing a Ring Topology Introduction to Switch Management First Time Connecting to the Switch Snmp Settings Password Protection Traps MIBsIP Address Assignment Assigning the Switch an IP Address Connecting Devices to the Switch Introduction to Web-based Switch Configuration Login to Web ManagerIntroduction Web-based User Interface Areas of the User InterfaceAreaFunction Web Pages Configuring The Switch Switch InformationClick the Switch Information link in the Configuration menu Bootp IP AddressDhcp Advanced Settings Setting the Switchs IP Address using the Console InterfaceVlan Name Specified or Management Station IP Addresses are assigned Box Information Lowest priority number in the stack is the Master switch Port ConfigurationTo configure switch ports Priority Stack Parameter Description State Port DescriptionSpeed/Duplex Flow Control To configure a mirror port Port MirroringLink Aggregation Understanding Port Trunk Groups 10. Link Aggregation Group Configuration window Add 12. Lacp Port Setting and Lacp Port Information window Lacp Port Setting History size Setting is 1 second MAC Notification Global SettingsSpecified.The default setting is MAC Notification Igmp MAC Notification Port SettingsIgmp Versions 1 Parameter Description Unit Type Meaning Vlan ID Igmp Snooping Static Router Ports 802.1s Mstp Spanning TreeFollowing parameters can be set VID Vlan ID 802.1w Rapid Spanning Tree STP Bridge Global SettingsPort Transition States Edge Port 21. STP Bridge Global Settings STP compatible MST Configuration Table Msti Msti ID Msti ID of the Cist is 0 and cannot be altered Displays the Msti ID previously set by the userParameter Parameter Description Instance ID Msti Port InformationInternal cost 0=Auto Priority Parameter Description Instance Type STP Instance SettingsInstance Status Instance Priority Parameter Description Designated Root Bridge Forward DelayExternal Root Cost Regional Root Bridge STP Port Settings Forwarding & Filtering Unicast Forwarding Vlan ID VIDMAC Address VID Static Multicast ForwardingMulticast MAC Address Not be a member of the Static Multicast Group VLANs Understanding Ieee 802.1p Priority Vlan DescriptionIeee 802.1Q VLANs Some relevant terms Ingress 802.1Q Vlan TagsFiltering Transmit 39.Adding an Ieee 802.1Q Tag Bits Port Vlan ID Default VLANsTagging and Untagging Ingress Filtering Port-based VLANs Switch PortsVlan Segmentation Vlan and Trunk Groups Protocol Type Header in Hexadecimal Form Static Vlan EntryPage Protocol ID Advertisement Port Settings Tag None Egress Forbidden Gvrp Setting Gvrp Traffic ControlIngress Check Acceptable Frame Type Port Security Admin StateMax. Learning Addr Mode Port Lock Entries MAC Address SwitchVlan Name Be deleted 18 QoS Advantages of QoSUnderstanding QoS Bandwidth Control Disables the limitNolimit Packets QoS Scheduling Mechanism Weight fairOutput Scheduling Parameter Description Strict Configuring the Combination Queue Parameter Description Max. PacketsBe specified 802.1p User Priority 802.1p Default Priority Traffic Segmentation 55. Setup Forwarding Ports window 57. System Log Servers Add Following parameters can be set System Log Server Parameter Description Index Status Choose Enabled or Disabled to activate or deactivateServer IP Severity Current Time Settings Sntp Settings Time Zone and DST +/- Hhmm DST Repeating SettingsMinutes Enter the month DST will start on, each year 61.Access Profile Table Ethernet Access Profile Table Configuring the Access Profile Table Vlan Source IP Mask Destination IP Mask Shown below is the Packet Content Mask configuration windowDscp Protocol Port Offset Replace Dscp Access IDSource IP Destination IPPage Destination MAC Destination Source MAC Source 71.Access Rule Configuration Packet Content Mask Priority Offset 72.Access Rule Display window Packet Content Mask Port-Based Network Access Control MAC-Based Network Access ControlSwitch 75 .1X Authenticator Settings window Configure Authenticator Local Users PAE System Control From and ToCapability From Initializing Ports for Port BasedAuth PAE State Backend State Initializing Ports for MAC Based Reauthenticate Ports for Port Based Reauthenticate Ports for MAC Based Radius Server Setting Up IP Interfaces Layer 3 IP Networking Layer 3 Global Advanced Settings Network Number IP Address To setup IP Interfaces on the Switch Parameter Description Interface Name MD5 Key Table ConfigurationSubnet Mask Secondary Route Source Metric Type Route Redistribution Settings IP address of the Static/Default Route Static/Default RouteFollowing parameters may be set or viewed ParameterDescription Dest Protocol Src Protocol Type Metric Backup State IP address above Route Preference SettingsRoute Type Validity Range Default Value Permanently set on the switch and unconfigurable Ospf Intra Parameter Description RIPStatic Ospf Inter Parameter Description IP Address Static ARP TableIP address of the ARP entry MAC address of the ARP entry RIP Configuration RIP Command CodesRIP Version 1 Message Format RIP 1 Message 102 Setting Up RIP Shortest Path Algorithm Link-State AlgorithmOspf Cost Ospf 104 Shortest Path Tree Areas and Border Routers Link-State Packets105 Message Digest Authentication MD-5 Ospf AuthenticationSimple Password Authentication Backbone and Area Designated Router Election AdjacenciesBuilding Adjacency Adjacencies on Point-to-Point Interfaces Hello Packet Database Description Packet Backup Designated Router Interface address on the networkOn the network 109 Field Description Options Link-State Request PacketBit MS bit Link-State Update Packet Octets Version No111 Link-State Acknowledgment Packet Link-State Advertisement Formats112 Router Links Advertisements Link State Advertisement HeaderLink State ID ASBR,AS External Link Link State Checksum Successive Link State Sequence numbers Area Field Description BitField Description Type Link ID Network Links Advertisements IP Type of Service that this metric refers toSummary Link Advertisements Field Description Type of Service that the following cost is relevant to Autonomous Systems External Link AdvertisementsField Description Network Mask Ospf Area ID Setting General Ospf SettingsParameter Description Ospf Route ID Current Route ID Stub Default Cost Ospf Interface SettingsParameter Description Area ID Stub Import Summary LSA Auth. Key ID Router Auth TypeMetric Type, as specified in the previous parameter Retransmit Time Seconds Ospf Virtual Interface Settings Ospf Host Route Settings Ospf Area Aggregation SettingsNetwork Number Lsdb Type Dhcp / Bootp Relay Information Dhcp / Bootp RelayFollowing fields are configured for Ospf host route Ospf domain DNS Relay DHCP/BootP Relay Settings Configuring DNS Relay Information Domain Name ResolutionDNS Relay Static Settings Mapping Domain Names to Addresses Vrrp Configuration Non-owner response Ping125 Vrrp Interface Settings VridDisplay Preempt Mode Admin. StateVrid Critical IP Address Virtual MAC Address Virtual IP AddressVirtual Router State Master IP Address Igmp Interface Configuration IP Multicast Routing Protocol129 Dvmrp Global Setting Dvmrp Interface ConfigurationDvmrp Interface Settings 130 PIM-DM Configuration PIM-DM Interface ConfigurationNeighbor Timeout Interval Probe Interval Displays the IP address for the IP interface named above Previously defined IP interfaceJoin/Prune Interval Seconds Security IP Security ManagementUser Accounts 133 Management Admin User Admin and User PrivilegesUser Account Management 134 Access Authentication Control Policy & Parameters135 Authentication Server Group Settings Applications Authentication SettingsLogin Method List Enable Method List 137 Authentication Server Hosts TimeoutRetransmit 139 Login Method Lists 140 Enable Method Lists Parameter Description Method List Name Local Enable PasswordMethod 1, 2, 3 Method list Local Enabled field will result in a fail message Enable AdminParameterDescription 142 Download Certificate Secure Socket Layer SSLParameter Description Certificate Type Key File Name Cert.der 144 Configuration SSH Configuration Secure Shell SSHSSH Algorithm AES128-CBC 3DES-CBCAES192-CBC AES256-CBC HMAC-SHA1 SSH User AuthenticationHMAC-MD5 HMAC-RSA Parameter Description User Name Auth. ModeHost Name Host IP Snmp User Table Snmp Manager Snmp Version Group NameAuth-Protocol Priv-Protocol 151 Snmp View Table Parameter Description View Name Snmp Group TableSubtree OID 152 Snmp Community Table Configuration Contents of the MIBs on the Switch Access RightSnmp Host Table Parameter Description Community Name Parameter Description Host IP Address Snmp Engine IDCommunity String or Snmp V3 User Name Port Utilization MonitoringCPU Utilization Parameter Description Time Interval Packets Received RX157 158 159 UMB Cast RX 160 Transmitted TX 161 Tx Packets Analysis window table for Bytes and Packets 162 Errors Record Number Crc ErrorUnder Size Over Size 164 LateColl Because the medium was busy SizeExColl Packet SingColl Stacking Information Prom Version A Star topology Device StatusRuntime Version Version Illustrations 168 MAC Address Find Down menus Switch History LogAddress Vlan ID of the Vlan the port is a member Igmp Snooping Forwarding Igmp Snooping GroupParameter Description Sequence 170 Port Access Control Authenticator StateBrowse Router Port Capability is disabled Authenticator StatisticsParameter Description Auth PAE State 802.1x Rx Error Recognized Rx Invalid AuthenticatorFollowing fields can be viewed 173 Authenticator Session Statistics Authenticator Diagnostics Radius Authentication 177 Radius Accounting Layer 3 Feature Browse IP Address178 Browse ARP Table Browse Routing TableBrowse IP Multicast Forwarding Table 179 Ospf Monitoring Browse Igmp Group TableBrowse Ospf Lsdb Table 180 Ospf Virtual Neighbor Browse Ospf Neighbor Table Dvmrp Monitoring Browse Dvmrp Routing TableBrowse Dvmrp Neighbor Address Table PIM Monitoring Browse Dvmrp Routing Next Hop TablePIM Neighbor Address Table 183 Tftp Service Switch MaintenanceDownload Configuration File Download Firmware Multiple Image Services Upload ConfigurationUpload Log Firmware Information Update Time Config Firmware ImageBOX Size Ping Test Parameter Description ImageActive Parameter Description Save Only save config ResetSave Changes 188 Following menu is used to restart the Switch Reboot DeviceLogout 189 General Appendix a Technical SpecificationsPhysical & Environmental EMC 191 Performance Gefahr Durch Blitzschlag Lightning Danger Electrical Type Class 1 EquipmentGeräte DER Klasse Vorsicht Fare Under Uvejr Elektrisk Klasse 1-UDSTYRElektrische Toestellen VAN Klasse Salamaniskuvaara Métalliques accessibles à l’utilisateurPericolo DI Fulmini Elettricità Dispositivi DI Classe Fare Arbeid Ikke på utstyr eller Kabler i Tordenvær Fare for LynnedslagPeligro DE Rayos Electrico Equipo DEL Tipo Clase Fara FÖR Blixtnedslag Elektriskt TYP Klass 1 Utrustning196