ZyXEL Communications SAM1316-22, User Manual

Page: 218 / 464

Chapter 32 ACL
SAM1316-22 User’s Guide
218
12
priority <priority>
13
protocol <protocol>
14
{srcip <ip>/<mask>{|dstip <ip>/<mask>{|tos <stos> <etos> {|srcport
<sport> <eport> {|dstport <sport> <eport>}}}}}
The input values for these values have the following ranges.
• <vid>: 1~4094
• <priority>: 1~7
• <etype>: 0~65535
• <protocol>:
tcp|udp|ospf|igmp|ip|gre|icmp|<ptype>
• <ptype>: 0~255
• <mask>: 0~32
• <tos>: 0~255
• <port>: 0~65535
If you apply multiple profiles to a PVC, the SAM1316-22 checks the profiles by rule
number. The lower the rule number, the higher the priority the rule (and profile)
has. For example, there are two ACL profiles assigned to a PVC. Profile1 is for
VLAN ID 100 (rule number 9) traffic, and Profile2 is for IEEE 802.1p priority 0
traffic (rule number 12). The SAM1316-22 checks Profile1 first. If the traffic is
VLAN ID 100, the SAM1316-22 follows the action in Profile1 and does not check
Profile2. You cannot assign profiles that have the same rule numbers to the same
PVC.
32.1.2 ACL Profile Actions
The SAM1316-22 can perform the following actions after it classifies upstream
traffic.
• rate <rate>: change the rate to the specified value (1~65535 kbps)
• rvlan <rvlan>: change the VLAN ID to the specified value (1~4094)
• rpri <rpri>: change the IEEE 802.1p priority to the specified value (0~7)
• deny: do not forward the packet
The SAM1316-22 can apply more than one action to a packet, unless you select
deny.
If you select the rvlan action, the SAM1316-22 replaces the VLAN ID before it
compares the VLAN ID of the packet to the VID of the PVC. As a result, it is
suggested that you replace VLAN ID on super channels, not normal PVC, since
super channels accept any tagged traffic. If you replace the VLAN ID for a normal