Zyxel VES-1624FT-55A [208/312] Acl profile actions

Zyxel VES-1624FT-55A [208/312] Acl profile actions
Chapter 36 ACL
VES-1624FT-55A User’s Guide
208
<ptype>: 0~255
<mask>: 0~32
If you apply multiple profiles to an ADSL PVC or VDSL port, the IP DSLAM checks the
profiles by rule number. The lower the rule number, the higher the priority the rule (and
profile) has. For example, there are two ACL profiles assigned to a PVC. Profile1 is for VLAN
ID 100 (rule number 9) traffic, and Profile2 is for IEEE 802.1p priority 0 traffic (rule number
12). The IP DSLAM checks Profile1 first. If the traffic is VLAN ID 100, the IP DSLAM
follows the action in Profile1 and does not check Profile2. You cannot assign profiles that have
the same rule numbers to the same ADSL PVC or VDSL port.
36.1.2 ACL Profile Actions
The IP DSLAM can perform the following actions after it classifies upstream traffic.
rate <rate>: change the rate to the specified value (64~65472 kbps)
rvlan <rvlan>: change the VLAN ID to the specified value (1~4094)
rpri <rpri>: change the IEEE 802.1p priority to the specified value (0~7)
deny: do not forward the packet
The IP DSLAM can apply more than one action to a packet, unless you select deny.
If you select the rvlan action, the IP DSLAM replaces the VLAN ID before it compares the
VLAN ID of the packet to the VID of the ADSL PVC or VDSL port. As a result, it is
suggested that you replace VLAN ID on super channels, not normal PVC, since super
channels accept any tagged traffic. If you replace the VLAN ID for a normal ADSL PVC or
VDSL port, the IP DSLAM drops the traffic because the new VLAN ID does not match the
VID of the ADSL PVC or VDSL port. This is illustrated in the following scenario.
There is a normal ADSL PVC or VDSL port, and its PVID is 900. You create an ACL rule to
replace the VLAN ID with 901. Initially, the traffic for the ADSL PVC or VDSL port belongs
to VLAN 900. Then, the IP DSLAM checks the ACL rule and changes the traffic to VLAN
901. When the IP DSLAM finally compares the VLAN ID of the traffic (901) to the VID of
the ADSL PVC or VDSL port (900), the IP DSLAM drops the packets because they do not
match.
36.2 ACL Setup Screen
Use this screen to assign ACL profiles to each ADSL PVC or VDSL port. To open this screen,
click Advanced Application > ACL.

Содержание

Скачать