Acl Profile Rules; Acl Profile Actions; Acl Profile Setup Screen - ZyXEL Communications MSC1024G Series User Manual

Managment switch card

Hide thumbs Also See for MSC1024G Series:

Table of Contents

Chapter 13 Profile Screens

13.24.1 ACL Profile Rules

If you apply multiple profiles to a PVC, the system checks the profiles by rule number. The

lower the rule number, the higher the priority the rule (and profile) has. For example, there are

two ACL profiles assigned to a PVC. Profile1 is for VLAN ID 100 (rule number 9) traffic, and

Profile2 is for IEEE 802.1p priority 0 traffic (rule number 12). The system checks Profile1

first. If the traffic is VLAN ID 100, the system follows the action in Profile1 and does not

check Profile2.

You can assign a PVC multiple rules of the same number as long as the rules do not conflict.

For example, you can assign a PVC a profile with a number 9 rule that allows VLAN 100

traffic and another profile with a number 9 rule that allows VLAN 200 traffic. However you

could not assign a PVC a profile with a number 9 rule that allows VLAN 100 traffic and

another profile with a number 9 rule that denies VLAN 100 traffic.

The system can perform the following actions after it classifies upstream traffic.

• rate: change the rate to the specified value (1~65535 kbps)

• rvlan: change the VLAN ID to the specified value (1~4094)

• rpri: change the IEEE 802.1p priority to the specified value (0~7)

• deny: do not forward the packet

The system can apply more than one action to a packet, unless you select deny.

If you select the rvlan action, the system replaces the VLAN ID before it compares the VLAN

ID of the packet to the VID of the PVC. As a result, it is suggested that you replace VLAN ID

on super channels, not normal PVC, since super channels accept any tagged traffic. If you

replace the VLAN ID for a normal PVC, the system drops the traffic because the new VLAN

ID does not match the VID of the PVC. This is illustrated in the following scenario.

There is a PVC with PVID 900. You create an ACL rule to replace the VLAN ID with 901.

Initially, the traffic for the PVC belongs to VLAN 900. Then, the system checks the ACL rule

and changes the traffic to VLAN 901. When the system finally compares the VLAN ID of the

traffic (901) to the VID of the PVC (900), the system drops the packets because they do not

Use this screen to set up ACL profiles. To open this screen, click Profile > ACL.

MSC1000G/1024G/1224G Series User's Guide

Msc1224g series Msc1000g series