ZyXEL Communications Dimension ES-3124 Support Notes page 86

ES-3100 Series Switch Support Notes
Setting up Classifier & Policy rule on your Switch
How should I configure if I only allow certain IP address on a certain port to
forward its traffic but deny all others?
In the beginning, we need to set up the classifier to group traffic into data flows
based on some such as source address, destination address, port number and
packet format. In this example, we specify which format of the packet that
ES-3124 applies its policy rules. We define three rules. Firstly, we define a
classifier that source address is coming from 192.168.1.20; secondly, we
specify a classifier that is based on port 2; finally, we define a classifier that is
ARP traffic for testing.
After the classification, we need to define the policy rule to ensure that the
traffic gets the deserved treatment in the network. Here, we also define three
policy rules. The first policy rule is to forward only the traffic from 192.168.1.20.
The second policy rule is to discard all the traffic from port 2 on first classifier;
and we apply the second policy rule on second classifier. Finally, the last policy
rule is set to forward the traffic that is ARP packet format.
Below is the configuration of classifier and policy rule.
Classifier 1
86
All contents copyright (c) 2006 ZyXEL Communications Corporation.