3Com CoreBuilder 3500, Implementation Manual

Page: 486 / 592

486 C
HAPTER
17: Q
O
S
AND
RSVP
Flow Classifier Information
You supply the following information when defining a flow classifier:
■
A classifier number in the range 1 to 399 (20 and 23 are predefined)
■
A classifier name (a unique name of up to 32 characters long)
■
A cast type (unicast, multicast, or both). If you create a classifier to
block all IP unicast traffic, the system will block TCP and UDP unicast
traffic only, not ICMP traffic.
■
The IP protocol type (TCP, UDP, or all)
■
Source IP address (in standard dot notation, such as 192.101.10.0)
■
Source IP address mask (not a subnet mask; see “Specifying Addresses
and Address Masks”)
■
Destination IP address
■
Destination IP address mask
■
Start and end of a TCP or UDP source port range as a number from
0 to 65535
■
Start and end of a TCP or UDP destination port range as a number
from 0 to 65535
■
Whether you want to define another address/port pattern (filter) for
this classifier
Specifying Addresses and Address Masks
You can classify traffic using source and destination IP addresses and their
associated source and destination IP address masks. For a classifier aimed
at filtering traffic to a specific destination from a particular source, you
could define a single address/port pattern that specifies the source
address and the destination address. Alternatively, if classified traffic to
and from certain locations is going to be controlled at the same service
level, you may decide to use two address/port patterns, one that covers IP
address A as the source and IP address B as the destination, and a second
pattern that covers IP address B as the source and IP address A as the
destination.
You specify a source or destination IP address in standard dot notation,
such as 192.101.10.0. An address of all zeroes is a wildcard match for
any source or destination address. You can use the 0 as a wildcard in any
portion of the address.