Classifier & Policy Rule Setup On Your Switch - ZyXEL Communications VES-1616 Support Notes

ZyXEL
After the configuration, the port is authenticated and the computer connected to
this port is allowed to access the network. Otherwise, the computer cannot access
the network.
Classifier & Policy rule setup on your Switch
This section shows you how to allow traffic from certain IP addresses and deny
others. This can be done easily using classifier and policy rules.
First, you need to create a classifier rule to group traffic into data flows based on
information such as the source address, destination address, port number and
packet format. In this example, we group traffic based on the packet format and
set the VES-1616F-3X to apply its policy rules. The following lists the three
classifier rules that we will define in this example:
1. Packet with a source IP address of 192.168.1.20
2. Packets on port 2
3. ARP traffic for testing
Once packet classification settings are done, we create policy rules to specify the
actions on the matched packets so they get the deserved treatment in the network.
Here, we also define three policy rules.
1. Forward traffic from 192.168.1.20 only (on the first classifier)
2. Discard all the traffic from port 2 (on the second classifier)
3. Forward ARP packets (on the third classifier)
All contents copyright 2008 ZyXEL Communications Corporation.
VES-1616/24FA-5x Series Support Notes
102