ZyXEL Communications XS3800-28 User Manual page 579

Table 310 SECURITY > ACL > Policy Rule > Add/Edit (continued)
LABEL DESCRIPTION
Classifier(s) This field displays the active classifiers you configure in the SECURITY > ACL > Classifier >
Classifier Setup screen.
Select the classifiers to which this policy rule applies. To select more than one classifier, press
[SHIFT] and select the choices at the same time.
General Parameters
Set the fields below for this policy. You only have to set the fields that is related to the actions you configure in the
Action field.
Egress Port Enter the number of an outgoing port. In stacking mode, the first number represents the slot
and the second the port number.
Priority Specify a priority level.
DSCP Specify a DSCP (DiffServ Code Point) number between 0 and 63.
TOS Specify the Type Of Service (TOS) priority level.
Metering Parameters
You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth
allocated (in cases where the network is congested) is called out-of-profile traffic.
Bandwidth Specify the bandwidth in kilobit per second (Kbps). Enter a number between 1 and 1000000.
Out of Profile Specify a new DSCP number (between 0 and 63) if you want to replace or remark the DSCP
DSCP
number for out-of-profile traffic.
Action
Specify the actions the Switch takes on the associated classified traffic flow.
Note: You can specify only one action (option) for each category (Forwarding, Priority, Diffserv,
Outgoing, Metering) in a policy rule.
Note: The Switch only applies one policy rule for each traffic flow.
Say you have a traffic flow that matches several classifiers, and you specify a different policy rule for each. The
Switch only classifies the traffic flow to the classifier with the highest Match Order. The Switch then applies the policy
rule with which the classifier is associated. You can set the classifier Match Order rule (manual or auto) in the ACL >
Classfier > Classifier Global settings screen (see
Let's say you set two classifiers (Class 1 and Class 2) and both identify all traffic from MAC address 11:22:33:44:55:66
on port 3.
If Policy 1 applies to Class 1 and the action is to drop the packets, Policy 2 applies to Class 2 and the action is to
forward the packets to the egress port, the Switch will forward the packets.
If Policy 1 applies to Class 1 and the action is to drop the packets, Policy 2 applies to Class 2 and the action is to
enable bandwidth limitation, the Switch will discard the packets immediately.
If Policy 1 applies to Class 1 and the action is to forward the packets to the egress port, Policy 2 applies to Class 2
and the action is to enable bandwidth limitation, the Switch will forward the packets.
Forwarding Select No change to forward the packets.
Select Discard the packet to drop the packets.
Select Do not drop the matching frame previously marked for dropping to retain the frames
that were marked to be dropped before.
Chapter 77 Policy Rule
Section 76.4 on page 573
XS3800-28 User's Guide
579
for more information).