Manuals / ZyXEL Communications / Household Appliance / Plumbing Product

ZyXEL Communications metrogigabit switch manual 221, Advanced Application Policy Rule

Models: metrogigabit switch

1 448

Download 448 pages 49.97 Kb

Page 221

Image 221

Chapter 21 Policy Rule

Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown.

Figure 103 Advanced Application > Policy Rule

The following table describes the labels in this screen.

Table 57 Advanced Application > Policy Rule

LABEL	DESCRIPTION
Active	Select this option to enable the policy.

Name	Enter a descriptive name for identification purposes.

MGS3700-12C User’s Guide

221

Page 221

Image 221

ZyXEL Communications metrogigabit switch manual 221, Advanced Application Policy Rule

Contents

MGS3700-12C Page Intended Audience About This Users GuideNeed More Help? Syntax Conventions Document ConventionsDslam Icons Used in FiguresSafety Warnings Safety Warnings MGS3700-12C User’s Guide Contents Overview IP Application 335 Table of Contents Chapter Initial Setup Example 115 Chapter Static MAC Forward Setup 137 173 Chapter Classifier 211 255 Chapter Loop Guard 295 335 357 413 Part VII Appendices and Index Part Page Backbone Application Getting to Know Your SwitchIntroduction Backbone Application Bridging ExampleTag-based Vlan Example High Performance Switching ExampleIeee 802.1Q Vlan Application Examples IPv6 Support Ways to Manage the SwitchGood Habits for Managing the Switch Getting to Know Your Switch MGS3700-12C User’s Guide Desktop Installation Procedure Hardware Installation and ConnectionInstallation Scenarios Precautions Mounting the Switch on a RackRack-mounted Installation Requirements Attaching the Mounting Brackets Attaching the Mounting Brackets to the SwitchMounting the Switch on a Rack Mounting the Switch on a RackFront Panel Hardware OverviewFront Panel Connections Label DescriptionGigabit Ethernet Ports Console PortAuto-crossover Default Ethernet Negotiation SettingsMini-GBIC Slots Transceiver Removal Transceiver InstallationManagement Port Power ConnectorDC Power Connection AC Power ConnectionConnect a Sensor to the Signal Slot Signal SlotOutput LEDs Rear PanelLED Descriptions LED Color Statu DescriptionConfiguring the Switch Hardware Overview Hardware Overview MGS3700-12C User’s Guide System Login Web ConfiguratorWeb Configurator Login Web Configurator LayoutNavigation Panel Sub-links Overview Basic Setting Advanced Application IP Application ManagementVlan Navigation Panel LinksLink Description Dhcp AAAChange Your Password Saving Your ConfigurationReload the Configuration File Switch LockoutResetting the Switch Resetting the Switch Via the Console Port Help Logging Out of the Web ConfiguratorWeb Configurator MGS3700-12C User’s Guide Creating a Vlan Initial Setup ExampleOverview Setting Port VID Initial Setup Network Example Port VID Initial Setup Example Management IP Address Configuring Switch Management IP AddressClick Basic Setting IP Setup in the navigation panel Initial Setup Example MGS3700-12C User’s Guide Tutorials How to Use Dhcp Snooping on the SwitchHost Port Vlan Pvid Dhcp Snooping Connected Port Trusted Tutorial Settings in this TutorialTutorial Tag Untagged Frames Tutorial Set the Dhcp Server Port to Trusted Dhcp Relay Tutorial Introduction How to Use Dhcp Relay on the SwitchVlan Tutorial Set Vlan Type to 802.1Q Tutorial Create a Static Vlan Tutorial Add Tag for Frames Received on Port Configuring Dhcp RelayTroubleshooting How to Use PPPoE IA on the SwitchSettings in This Tutorial Configuring Switch aTutorials Configuring Switch B Tutorials Tutorials How to Use Error Disable and Recovery on the Switch Tutorials How to Set Up a Guest Vlan Creating a Guest Vlan Tutorials Enabling Ieee 802.1x Port Authentication Enabling Guest Vlan How to Do Port Isolation in a Vlan Internet Tutorials Tutorials Click Advanced Application Private Vlan Creating a Private Vlan RuleTutorials MGS3700-12C User’s Guide Basic Configuration Page System Status and Port Statistics Lacp Port Status SummaryStatus Up Time Status Port Details Status Port DetailsHOL RX CRC Basic Setting 100 System InformationMAX 101MIN RPM102 General Setup103 Select First , Sunday , November Introduction to VLANs104 105 Smart Isolation106 Switch Setup ScreenPort Setup screen 107 Switch. Smart isolation does not work with Mstp and/or portVlan port isolation or private Vlan and Mrstp on Based Vlan108 IP SetupManagement IP Addresses 109 Basic Setting IP SetupVID 110In-band IP Addresses 111Some web configurator screens Port Setup112 Make themHalf Duplex, 100M/Full Duplex and 1000M/Full Duplex 113Queue tag. See Priority Queue Assignment in on page 106 for Bpdu114 115 Part116 117 Introduction to Ieee 802.1Q Tagged VLANsTpid CFI Vlan IDForwarding Tagged and Untagged Frames Automatic Vlan RegistrationGarp Gvrp119 Port Vlan TrunkingIeee 802.1Q Vlan Terminology Vlan Term Description Parameter120 Select the Vlan TypeStatic Vlan 121 Static Vlan Status122 Configure a Static VlanVlan Details Active 123124 Gvrp Configure Vlan Port Settings125 126 Subnet Based VLANsPvid Untag Only127 Configuring Subnet Based Vlan128 Advanced Application Vlan Vlan Port Setting Subnet Based129 Protocol Based VLANs130 Configuring Protocol Based VlanAre not allowed to be used for protocol based VLANs 131132 Port-based Vlan SetupCreate an IP-based Vlan Example 133 134 Configure a Port-based VlanChoose All connected or Port isolation Port Based Vlan Setup135 136 137 Static MAC Forward SetupConfiguring Static MAC Forwarding Advanced Application Static MAC Forwarding 138139 140 141 Static Multicast Forward SetupStatic Multicast Forwarding Overview 142 Configuring Static Multicast ForwardingAdvanced Application Static Multicast Forwarding 143144 145 Configure a Filtering RuleFiltering MAC 14613.1 STP/RSTP Overview Spanning Tree ProtocolSTP Terminology 147148 How STP WorksSTP Path Costs Link Recommended Allowed Speed Value RangeMultiple Rstp STP Port States149 STP Port StatesMstp Network Example Multiple STP150 MST Region 151Common and Internal Spanning Tree Cist 152MST Instance 153 Spanning Tree Protocol Status Screen154 Spanning Tree ConfigurationConfiguration screen to enable Rstp on the Switch Configure Rapid Spanning Tree Protocol155 RstpBridge Protocol Data Unit Bpdu 156157 Rapid Spanning Tree Protocol Status158 159 Configure Multiple Rapid Spanning Tree ProtocolConfiguration screen to enable Mrstp on the Switch 160 161 Multiple Rapid Spanning Tree Protocol Status162 163 Configure Multiple Spanning Tree Protocol164 Configuration screen to enable Mstp on the SwitchBridge Priority 165166 Multiple Spanning Tree Protocol StatusMsti 167CST 168 Bandwidth Control Overview Bandwidth ControlCIR and PIR 169170 Bandwidth Control Setup171 172 173 Broadcast Storm Control SetupBroadcast Storm Control 174 175 Port Mirroring SetupMirroring 176 177 RMirrorRMirror Overview 178 RMirror Configuration179 SourceAdvanced Application Mirroring RMirror Source 180181 DestinationAdvanced Application Mirroring RMirror Destination 182183 Connected Port184 Link Aggregation Overview Link AggregationDynamic Link Aggregation 185Link Aggregation ID Peer Switch Link Aggregation ID Local SwitchLink Aggregation ID 186187 Link Aggregation Status188 189 Link Aggregation SettingPort in an active trunk group 190Dynamic link aggregation Link Aggregation Control Protocol191 192 Static Trunking ExampleTrunking Example Physical Connections 193194 Port Authentication Overview Port AuthenticationIeee 802.1x Authentication 195196 MAC Authentication197 Port Authentication Configuration198 Before configuring it on each portActivate Ieee 802.1x Security 199 Guest VlanGuest Vlan Example 200201 202 Activate MAC Authentication203 Lower value, then it supersedes this setting. See Section204 205 Port SecurityAbout Port Security Forwarding screen Port Security Setup206 207 208 Vlan MAC Address Limit209 210 Classifier Configuring the ClassifierAbout the Classifier and QoS 211Untagged , Ethernet II tagged and Ethernet II untagged 212Dscp 213214 Viewing and Editing Classifier ConfigurationYou configure the socket numbers Classifier Summary Table 215Common Ethernet Types and Protocol Numbers Common IP Protocol Types and Protocol Numbers216 Classifier ExampleCommon TCP and UDP Port Numbers Protocol Name TCP/UDP Port NumberClassifier Example 217218 Policy Rules Overview Policy RuleDiffServ Dscp and Per-Hop Behavior220 Configuring Policy RulesAdvanced Application Policy Rule 221TOS 222Select Do not drop the matching frame previously marked for Select Send the packet to priority queue to put the packets223 Viewing and Editing Policy Configuration224 225 Policy Example226 Queuing Method Weighted Fair QueuingQueuing Method Overview Strictly Priority Queuing228 Weighted Round Robin Scheduling WRR229 Configuring Queuing230 Vlan Stacking Overview Vlan StackingVlan Stacking Example 231232 Vlan Stacking Port RolesFrame Format Vlan Tag Format233 Vlan Tag Format234 Configuring Vlan Stacking802.1Q Frame VID Vlan ID FCS235 Port-based Q-in-QThem This screen at a timeSpvid 236Cvid Selective Q-in-Q237 238 Multicast Overview MulticastIP Multicast Addresses Igmp FilteringIgmp Snooping Multicast StatusIgmp Snooping and VLANs 240241 Multicast SettingYou make them 242Join multicast groups 243 Setting Igmp Filtering Profile screen244 Igmp Snooping VlanScreen Setting screen first245 Start Address and End Address fields Igmp Filtering Profile246 Profile MVR Overview247 MVR Modes Types of MVR PortsHow MVR Works 248249 General MVR ConfigurationCompatible 250251 MVR Group ConfigurationMvlan 252253 MVR Configuration Example254 MVR Group Configuration Example255 Authentication, Authorization and Accounting AAALocal User Accounts AAA ScreensRadius and TACACS+ 256257 Radius Server SetupShared Secret 258259 TACACS+ Server Setup260 261 AAA SetupMethod 2 and Method 3 fields 262263 264 Vendor Specific AttributeSupported VSAs Function AttributeTunnel Protocol Attribute Supported Radius Attributes265 Attributes Used for Authenticating Privilege Access Attributes Used for AuthenticationAttributes Used to Login Users Attributes Used by the Ieee 802.1x Authentication267 Attributes Used for AccountingAttributes Used for Accounting System Events Attributes Used for Accounting Exec EventsRadius Attributes Exec Events via 268Attributes Used for Accounting Ieee 802.1x Events 269 IP Source GuardIP Source Guard Overview 270 Dhcp Snooping OverviewTrusted vs. Untrusted Ports Dhcp Snooping DatabaseDhcp Relay Option 82 Information Configuring Dhcp Snooping271 ARP Inspection and MAC Address Filters ARP Inspection Overview272 IP Source Guard Configuring ARP Inspection273 Syslog274 IP Source Guard Static BindingIP Source Guard Static Binding 275276 277 Dhcp Snooping278 Configure screen. See .5 on279 280 Dhcp Snooping ConfigureVlan too 281Dhcp requests will not succeed 282 Dhcp Snooping Port Configure283 Dhcp Snooping Vlan Configure284 Dhcp Snooping Configure screen. See .5 onDelete ARP Inspection Status285 286 ARP Inspection Vlan Status287 ARP Inspection Log Status288 ARP Inspection ConfigureARP Inspection Vlan Configure screen, you can Syslog rate and Log interval 289Interval ARP Inspection Port Configure290 291 ARP Inspection Port Configure292 ARP Inspection Vlan Configure293 294 Loop Guard Overview Loop Guard295 STP296 Switch in Loop State297 Loop Guard Setup298 Vlan Mapping Overview Vlan MappingVlan Mapping Example 299300 Enabling Vlan MappingTranslated VID field Configuring Vlan Mapping301 302 303 Layer 2 Protocol TunnelingLayer 2 Protocol Tunneling Overview 304 Layer 2 Protocol Tunneling Mode305 Configuring Layer 2 Protocol Tunneling306 UDLD, and Pagp on the access ports only307 SFlowSFlow Overview 308 SFlow Configuration309 SFlow Collector Configuration310 Error-Disable Recovery Overview Error DiableCPU Protection Overview 311312 Error Disable ScreenCPU Protection Configuration 313 Error-Disable Detect Configuration314 Errdisable CPU protection screen315 Error-Disable Recovery Configuration316 PPPoE Intermediate Agent Overview PPPoEPPPoE Intermediate Agent Tag Format 317318 Sub-Option FormatPPPoE IA Circuit ID Sub-option Format User-defined String PPPoE IA Remote ID Sub-option FormatPort State 32.2.1.2 WT-101 Default Circuit ID Syntax319 PPPoE IA Circuit ID Sub-option Format Defined in WT-101320 PPPoEPPPoE Intermediate Agent Application PPPoE Intermediate Agent Port screen or for a PPPoE IA Per-Port321 Advanced Application PPPoE Intermediate Agent Port 322Advanced Application PPPoE Intermediate Agent Port 323Untrusted 324 PPPoE IA Per-Port Per-VLAN325 PPPoE IA for Vlan326 327 Private VlanPrivate Vlan Overview 328 Configuring Private Vlan329 330 331 Green EthernetGreen Ethernet Overview 332 Configuring Green Ethernet333 334 335 IP Application336 337 Static RouteStatic Routing Overview 338 Configuring Static Routing339 340 341 Differentiated ServicesDiffServ Overview 342 Two Rate Three Color Marker Traffic PolicingDiffServ Network Example 343 TRTCM-Color-blind ModeActivating DiffServ TRTCM-Color-aware Mode344 PIR?IP Application DiffServ 345346 Configuring 2-Rate 3 Color Marker SettingsDefault DSCP-IEEE 802.1p Mapping DSCP-to-IEEE 802.1p Priority Settings347 Dscp Value348 Configuring Dscp SettingsDhcp Overview Dhcp Configuration OptionsDhcp Modes 349Dhcp Relay Dhcp StatusDhcp Relay Agent Information 350General Setup Configuring Dhcp Global Relay351 Relay Agent InformationVLAN1VLAN2 Global Dhcp Relay Configuration Example352 353 Configuring Dhcp Vlan Settings354 General Setup screenExample Dhcp Relay for Two VLANs Dhcp Relay for Two VLANs Dhcp Relay for Two VLANs Configuration Example356 357 Management358 359 MaintenanceMaintenance Screen Save Configuration Load Factory DefaultSettings to the current configuration on the Switch 360361 Reboot SystemFirmware Upgrade 362 Restore a Configuration FileFTP Command Line Backup a Configuration FileFilename Conventions 363Example FTP Commands FTP Command Line Procedure364 Filename ConventionsGUI-based FTP Clients Command DescriptionFTP Restrictions 365366 Access Control Overview Access ControlAccess Control Main Screen Access Control Overview368 About SnmpSnmp v3 and Security Snmp CommandsSupported MIBs 369370 Snmp TrapsSnmp System Traps Option Object Label Object ID DescriptionSnmp InterfaceTraps 371AAA Traps 372Snmp IP Traps Snmp Switch Traps373 CFM Configuring Snmp374 Version 375Specify in this section to create accounts on the Snmp Manager376 Security level or higher than the security level settings on377 Configuring Snmp Trap Group378 Setting Up Login Accounts379 SSH Overview380 How SSH worksRequirements for Using SSH SSH Implementation on the SwitchIntroduction to Https 381382 Https ExampleInternet Explorer Warning Messages 383 Netscape Navigator Warning MessagesSecurity Certificate 2 Netscape Security Certificate 1 Netscape385 Service Port Access ControlMain Screen 386 Remote ManagementSNMP/SSH Https 387HTTP/ICMP 388 389 DiagnosticDiagnostic 390 Syslog Overview Syslog391 Syslog Severity Levels392 Syslog Setup393 Syslog Server Setup394 Cluster Management ZyXEL Clustering Management SpecificationsCluster Management Status Overview 395396 Cluster Management StatusManager Cluster Member Switch Management397 398 Uploading Firmware to a Cluster Member SwitchFTP Parameter Description 399FTP Upload to Cluster Member Example 400 Clustering Management ConfigurationCandidate list 401Based Vlan 402 403 MAC TableMAC Table Overview 404 Viewing the MAC Table405 406 ARP Table Overview ARP TableHow ARP Works 407408 Viewing the ARP Table409 Configure CloneConfigure Clone 410 411 412 413 Troubleshooting Product Specifications414 415 TroubleshootingPower, Hardware Connections, and LEDs 416 Switch Access and LoginAdvanced Suggestions 417418 Switch ConfigurationHardware Specifications Product SpecificationsSpecification Description 419420 Firmware SpecificationsFeature Description Queuing 421422 423 Feature SpecificationsMVR 424Standard Description 425Standards Supported EMC 426BRIDGE-MIB, Q-BRIDGE-MIB 427 Fan Module Removal and Installation428 429 Appendices Index430 Name Protocol Ports Description Commonly Used Services431 432 433 434 435 CopyrightCertifications FCC Warning CE Mark Warning 436437 ZyXEL Limited Warranty438 439 IndexNumbers ARP440 441 442 Mrstp 443MIB 444 SPQ 445Trtcm 446Vlan 104 447448

Figure 103 Advanced Application > Policy Rule

LABEL

221