Chapter 11: Classifiers
134
Section II: Advanced Operations
Guidelines
Follow these guidelines when creating a classifier:
Each classifier represents a separate traffic flow.
The variables within a classifier are linked by AND. The more variables
you define within a classifier, the more specific it becomes in terms of
the flow it defines. For instance, specifying both a source IP address
and a TCP destination port within the same classifier defines a traffic
flow that relates to IP packets containing both the designated source
IP address and the TCP destination port. There are, however, some
restrictions on combining variables in the same classifier. For the
restrictions, refer to “Classifier Criteria” on page 129.
The same classifier can belong to ACLs and QoS policies.
You can apply the same classifier to more than one ACL or QoS
policy.
A classifier without any defined variables applies to all packets.
You cannot create two classifiers that have the same settings. There
can be only one classifier for any given type of traffic flow.
A classifier can have a maximum of eight defined criteria, not including
the classifier ID number and the description.
The switch can store up to 256 classifiers. However, the maximum
number of classifiers you can assign to active access control lists and
QoS policies at any one time will be from 14 to 127. The number
depends on several factors, such as the number of ports to which the
classifiers are assigned and the types of criteria defined in the
classifiers.
You cannot modify a classifier if it belongs to an ACL or QoS policy
that is assigned to a port. You must remove the port assignments from
the ACL or policy and reassign them after modifying the classifier.
You cannot delete a classifier if it belongs to an ACL or QoS policy.
You must remove a classifier from its ACLs and QoS policies before
you can delete it.
Содержание AT-S63
Страница 14: ...Figures 14 ...
Страница 18: ...Tables 18 ...
Страница 28: ...28 Section I Basic Operations ...
Страница 58: ...Chapter 1 Overview 58 ...
Страница 76: ...Chapter 2 AT 9400Ts Stacks 76 Section I Basic Operations ...
Страница 96: ...Chapter 5 MAC Address Table 96 Section I Basic Operations ...
Страница 114: ...Chapter 8 Port Mirror 114 Section I Basic Operations ...
Страница 116: ...116 Section II Advanced Operations ...
Страница 146: ...Chapter 12 Access Control Lists 146 Section II Advanced Operations ...
Страница 176: ...Chapter 14 Quality of Service 176 Section II Advanced Operations ...
Страница 196: ...196 Section III Snooping Protocols ...
Страница 204: ...Chapter 18 Multicast Listener Discovery Snooping 204 Section III Snooping Protocols ...
Страница 216: ...Chapter 20 Ethernet Protection Switching Ring Snooping 216 Section III Snooping Protocols ...
Страница 218: ...218 Section IV SNMPv3 ...
Страница 234: ...234 Section V Spanning Tree Protocols ...
Страница 268: ...268 Section VI Virtual LANs ...
Страница 306: ...Chapter 27 Protected Ports VLANs 306 Section VI Virtual LANs ...
Страница 320: ...320 Section VII Internet Protocol Routing ...
Страница 360: ...Chapter 30 BOOTP Relay Agent 360 Section VII Routing ...
Страница 370: ...Chapter 31 Virtual Router Redundancy Protocol 370 Section VII Routing ...
Страница 372: ...372 Section VIII Port Security ...
Страница 402: ...Chapter 33 802 1x Port based Network Access Control 402 Section VIII Port Security ...
Страница 404: ...404 Section IX Management Security ...
Страница 436: ...Chapter 36 PKI Certificates and SSL 436 Section IX Management Security ...
Страница 454: ...Chapter 38 TACACS and RADIUS Protocols 454 Section IX Management Security ...
Страница 462: ...Chapter 39 Management Access Control List 462 Section IX Management Security ...
Страница 504: ...Appendix B SNMPv3 Configuration Examples 504 Security Model Security Level Storage Type SNMPv3 Parameters Continued ...
Страница 532: ...Appendix D MIB Objects 532 ...