ZyXEL Communications XGS2220 Series User Manual page 457

The following table describes the labels in this screen.
Table 261 SECURITY > ACL > Classifier > Classifier Setup > Add/Edit
LABEL DESCRIPTION
Active Enable the switch button to enable this rule.
Name Enter a descriptive name for this rule for identifying purposes. You can enter up to 32 printable ASCII
characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ].
Weight Enter a number between 0 and 65535 to specify the rule's weight. When the match order is in manual
mode in the Classifier Global Setting screen, a higher weight means a higher priority.
Log Select this option to have the Switch create a log message when the rule is applied and record the
number of matched packets in a particular time interval.
Note: Make sure you also enable logging in the Classifier Global Setting screen.
Count Select this option to have the Switch count how many times the rule is applied.
Time Select the name of the pre-configured schedule that you want to apply to the rule. The rule will be
Range active only at the scheduled date and/or time.
If you select None, the rule will be active all the time.
Ingress Port
Port Select Any to apply the rule to all ports.
Alternatively, to specify the ports enter the port numbers to which the rule should be applied. You can
enter multiple ports separated by (no space) comma (,) or hyphen (-). For example, enter "3-5" for
ports 3, 4, and 5. Enter "3,5,7" for ports 3, 5, and 7.
Trunk Select Any to apply the rule to all trunk groups.
Alternatively, to specify multiple trunks, enter the trunk group ID to apply the rule to multiple trunks.
You can enter multiple trunks with (t) or (T) then the trunk group ID separated by (no space) comma
(,) or hyphen (-). For example, enter "t3-t5" for trunks 3, 4, and 5. Enter "T3,T5,T7" for trunks 3, 5, and 7.
Layer 2
Specify the fields below to configure a layer 2 classifier.
VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source VLAN
ID in the field provided.
Priority Select Any to classify traffic from any priority level or select the second option and specify a priority
level in the field provided.
Ethernet Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value.
Type
Source Select Any to apply the rule to all MAC addresses.
MAC
To specify a source, select MAC/Mask to enter the source MAC address of the packet in valid MAC
Address
address format (six hexadecimal character pairs) and type the mask for the specified MAC address to
determine which bits a packet's MAC address should match.
Enter "f" for each bit of the specified MAC address that the traffic's MAC address should match. Enter
"0" for the bits of the matched traffic's MAC address, which can be of any hexadecimal characters.
For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet
with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the Mask field blank, the
Switch automatically sets the mask to ff:ff:ff:ff:ff:ff.
Chapter 67 Classifier
XGS2220 Series User's Guide
457