3Com 4007, Руководство по внедрению, Страница: 578 / 684

578 C
HAPTER
22: Q
O
S
AND
RSVP
Flow Classifier Information
You supply the following information when you define a flow classifier:
■
Classifier number in the range of from 1 through 399 (20 and 23 are
predefined)
■
Classifier name (a unique name of up to 32 characters long)
■
Cast type (unicast, multicast, or both). If you create a classifier to block
all IP unicast traffic, the Multilayer Switching Module blocks TCP and
UDP unicast traffic only, not ICMP traffic.
■
IP protocol type (TCP, UDP, or all)
■
Source IP address (in standard dot notation, such as 192.101.10.0)
■
Source IP address mask (not a subnet mask; see “Specifying Addresses
and Address Masks”)
■
Destination IP address
■
Destination IP address mask
■
Start and end of a TCP or UDP source port range as a number from 0
through 65535
■
Start and end of a TCP or UDP destination port range as a number
from 0 through 65535
■
Whether you want to define another address/port pattern (filter) for
this classifier
Specifying Addresses and Address Masks
You can classify traffic using source and destination IP addresses and their
associated source and destination IP address masks. For a classifier aimed
at filtering traffic to a specific destination from a particular source, for
instance, you may define a single address/port pattern that specifies the
source address and the destination address. Or, if classified traffic to and
from certain locations is going to be controlled at the same service level,
you may decide to use two address/port patterns: one pattern that covers
IP address A as the source and IP address B as the destination, and a
second pattern that covers IP address B as the source and IP address A as
the destination.
You specify a source or destination IP address in standard dot notation,
such as 192.101.10.0. An address of all zeroes is a wildcard match for
any source or destination address. Use 0 as a wildcard in any portion of
the address.