ZyXEL Communications XGS2220 Series

To Next Page

To Previous Page

Chapter 68 Policy Rule

XGS2220 Series User’s Guide

467

Figure 343 Policy Example

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents7
- Part I: User's Guide27
- User's Guide27
- Getting to Know Your Switch28
- Introduction28
- Multi-Gigabit29
- Management Modes30
- Mode Changing31
- ZON Utility33
- Poe34
- Web Configurator Networked AV Mode34
- Example Applications35
- Poe Example Application35
- Backbone Example Application36
- Bridging Example Application36
- High Performance Switching Example37
- IEEE 802.1Q VLAN Application Examples37
- Ipv6 Support38
- Ways to Manage the Switch38
- Good Habits for Managing the Switch39
- Freestanding Installation Procedure40
- Hardware Installation and Connection40
- Installation Scenarios40
- Safety Precautions40
- Installation Requirements41
- Mounting the Switch on a Rack41
- Precautions41
- Attaching the Mounting Brackets to the Switch42
- Mounting the Switch on a Rack42
Chapter 3 Hardware Panels44
- Front Panel Connections44
- Hardware Panels44
- Gigabit Ethernet Ports45
- SFP/SFP+ Slots46
- Console Port48
- Rear Panel48
- Grounding49
- AC Power Connection51
- Leds53
- Part II: Technical Reference56
- Technical Reference56
Chapter 4 Web Configurator57
- Overview57
- System Login57
- Web Configurator57
- Requirements62
- Run the ZON Utility62
- Zyxel One Network (ZON) Utility62
- Basic Settings66
- Networked AV Mode Wizard66
- Advanced Settings71
- Wizard76
- Basic77
- Protection82
- Vlan84
- Qos85
- Web Configurator Layout86
- Tables and Lists95
- Change Your Password96
- Reboot the Switch97
- Reset the Switch97
- Save Your Configuration97
- Switch Lockout97
- Log out of the Web Configurator98
- Reload the Configuration File98
- Help99
- Create a VLAN100
- Initial Setup Example100
- Overview100
- Set Port VID101
- Configure Switch Management IP Address102
Chapter 6 Tutorials105
- How to Use Dhcpv4 Snooping on the Switch105
- Overview105
- Tutorials105
- Create a VLAN109
- DHCP Relay Tutorial Introduction109
- How to Use Dhcpv4 Relay on the Switch109
- Configure Dhcpv4 Relay112
- How to Use Auto Configuration through a DHCP Server on the Switch113
- Troubleshooting113
- Dashboard117
- New User Interface117
- Port Status120
- Quick Links to Use120
Chapter 8 MONITOR122
- Monitor122
- ARP Table123
- ARP Table Overview123
Chapter 9 ARP Table123
- Viewing the ARP Table123
- What You Can Do123
- What You Need to Know123
Chapter 10 IP Table125
- IP Table125
- IP Table Overview125
- Viewing the IP Table126
Chapter 11 Ipv6 Neighbor Table127
- Ipv6 Neighbor Table127
- Ipv6 Neighbor Table Overview127
- Viewing the Ipv6 Neighbor Table127
Chapter 12 MAC Table129
- MAC Table129
- MAC Table Overview129
- What You Can Do129
- What You Need to Know129
- Viewing the MAC Table130
Chapter 13 Neighbor132
- Neighbor132
- Neighbor Overview132
- What You Can Do132
- Neighbor Details133
Chapter 14 Path MTU Table136
- Path MTU Overview136
- Path MTU Table136
- Viewing the Path MTU Table136
Chapter 15 Port Status137
- Port Status137
- What You Can Do137
- Port Details138
- DDMI141
- DDMI Details141
- Port Utilization143
Chapter 16 Routing Table145
- Ipv4 Routing Table145
- Routing Table145
- Routing Table Overview145
- What You Can Do145
- Ipv6 Routing Table146
Chapter 17 System Information147
- System Information147
- What You Can Do147
Chapter 18 System Log150
- System Log150
- System Log Overview150
- System152
Chapter 20 Cloud Management153
- Cloud Management153
- Cloud Management Overview153
- Nebula Center Control Discovery153
Chapter 21 General Setup157
- General Setup157
- Hardware Monitor Setup159
Chapter 22 Interface Setup161
- Interface Setup161
- Interface Setup Overview161
- Add/Edit Interfaces162
Chapter 23 IP Setup163
- IP Interfaces163
- IP Setup163
- IP Setup Overview163
- What You Can Do163
- IP Status164
- IP Status Details164
- IP Setup166
- Add/Edit IP Interfaces167
- Network Proxy Configuration168
Chapter 24 Ipv6170
- Ipv6170
- Ipv6 Overview170
- Ipv6 Status170
- What You Can Do170
- Ipv6 Interface Status Details171
- Ipv6 Global Setup173
- Ipv6 Interface Setup174
- Edit an Ipv6 Interface175
- Ipv6 Link-Local Address Setup175
- Edit an Ipv6 Link-Local Address176
- Ipv6 Global Address Setup177
- Add/Edit an Ipv6 Global Address178
- Ipv6 Neighbor Discovery Setup178
- Edit an Ipv6 Neighbor Discovery179
- Ipv6 Router Discovery Setup180
- Edit Ipv6 Router Discovery181
- Add/Edit Ipv6 Prefix182
- Ipv6 Prefix Setup182
- Ipv6 Neighbor Setup183
- Add/Edit Ipv6 Neighbor184
- Dhcpv6 Client Setup184
- Edit Dhcpv6 Client185
Chapter 25 Logins187
- Logins187
- Set up Login Accounts187
Chapter 26 SNMP189
- Configure SNMP189
- Snmp189
- SNMP Overview189
- What You Can Do189
- Add/Edit SNMP User191
- Configure SNMP User191
- Configure SNMP Trap Group193
- Enable or Disable Sending of SNMP Traps on a Port194
- Technical Reference194
- About SNMP195
Chapter 27 Switch Setup198
- Introduction to Vlans198
- Switch Setup198
- Switch Setup Overview198
Chapter 28 Syslog Setup201
- Syslog Overview201
- Syslog Setup201
- What You Can Do201
- Add/Edit a Syslog Server203
Chapter 29 Time Range204
- Configuring Time Range204
- Time Range204
- Time Range Overview204
- What You Can Do204
- Add/Edit Time Range205
Chapter 30 PORT207
- Port207
- Auto PD Recovery208
- Auto PD Recovery (for Poe Models Only) Overview208
Chapter 31 Auto PD Recovery208
- What You Can Do208
- Activate the Automatic PD Recovery210
Chapter 32 Flex Link213
- Flex Link213
- Flex Link Overview213
- Flex Link Status213
- What You Can Do213
- Flex Link Setup214
- Add/Edit Flex Link215
Chapter 33 Green Ethernet216
- Configuring Green Ethernet216
- Green Ethernet216
- Green Ethernet Overview216
Chapter 34 Link Aggregation218
- Link Aggregation218
- Link Aggregation Overview218
- What You Can Do218
- What You Need to Know218
- Link Aggregation Status219
- Link Aggregation Setting221
- Link Aggregation Control Protocol222
- Static Trunking Example224
- Technical Reference224
- Link Layer Discovery Protocol (LLDP)226
- LLDP Overview226
- LLDP-MED Overview227
- LLDP Local Status228
- What You Can Do - LLDP228
- What You Can Do - LLDP MED228
- LLDP Local Port Status Detail230
- LLDP Remote Status233
- LLDP Remote Port Status Detail234
- LLDP Setup238
- Basic TLV Setting240
- Org-Specific TLV Setting241
- LLDP-MED Setup242
- LLDP-MED Network Policy243
- Add/Edit LLDP-MED Network Policy244
- Add/Edit LLDP-MED Location245
- LLDP-MED Location245
Chapter 36 OAM248
- Oam248
- OAM Overview248
- OAM Status248
- What You Can Do248
- OAM Details249
- OAM Setup253
- OAM Remote Loopback254
Chapter 37 Poe Setup256
- Poe Setup256
- Poe Status (for Poe Models Only)256
- Poe Setup258
- Add/Edit Poe Time Range262
- Poe Time Range Setup262
Chapter 38 Port Setup264
- Port Setup264
Chapter 39 ZULD266
- What You Can Do266
- What You Need to Know266
- Zuld266
- ZULD Overview266
- ZULD Status267
- ZULD Setup268
- Switching270
- Layer 2 Protocol Tunneling271
- Layer 2 Protocol Tunneling Overview271
- What You Can Do271
- What You Need to Know271
- Configuring Layer 2 Protocol Tunneling272
Chapter 42 Loop Guard275
- Loop Guard275
- Loop Guard Overview275
- What You Can Do275
- What You Need to Know275
- Loop Guard Setup277
Chapter 43 MAC Pinning278
- MAC Pinning278
- MAC Pinning Configuration278
- MAC Pinning Overview278
Chapter 44 Mirroring280
- Local Port Mirroring280
- Mirroring280
- Mirroring Overview280
- What You Need to Know280
Chapter 45 Multicast282
- Multicast282
- Multicast Overview282
- What You Can Do - Ipv4 Multicast282
- What You Can Do - Ipv6 Multicast282
- What You Can Do - MVR283
- What You Need to Know283
- Ipv4 Multicast Status286
- IGMP Snooping287
- IGMP Snooping VLAN290
- Add/Edit IGMP Snooping Vlans291
- IGMP Filtering Profile292
- Add IGMP Filtering Profile293
- Add IGMP Filtering Rule293
- Ipv6 Multicast Status294
- MLD Snooping-Proxy295
- MLD Snooping-Proxy VLAN295
- Add/Edit MLD Snooping-Proxy VLAN296
- MLD Snooping-Proxy Port Role Setting298
- MLD Snooping-Proxy Filtering299
- Add MLD Snooping-Proxy Filtering Profile301
- MLD Snooping-Proxy Filtering Profile301
- Add MLD Snooping-Proxy Filtering Rule302
- General MVR Configuration303
- Add/Edit MVR304
- MVR Group Setup305
- Add/Edit MVR Group306
- MVR Configuration Example307
- Static Multicast Forwarding310
- Static Multicast Forwarding Overview310
- What You Can Do310
- What You Need to Know310
- Static Multicast Forwarding by MAC311
- Add/Edit Static Multicast Forwarding by MAC312
- Configure a Static Multicast Ipv4 Address312
- Add/Edit a Static Multicast Address by IP313
Chapter 47 Pppoe315
- Pppoe315
- Pppoe Intermediate Agent Overview315
- What You Can Do315
- What You Need to Know315
- Pppoe Intermediate Agent317
- Pppoe IA Port319
- Pppoe IA Port VLAN320
- Pppoe IA VLAN322
- Differentiated Services323
- Diffserv Overview323
- What You Can Do323
- What You Need to Know323
- Activating Diffserv324
- DSCP-To-IEEE 802.1P Priority Settings325
- Configuring DSCP Settings326
Chapter 49 Queuing Method327
- Queuing Method327
- Queuing Method Overview327
- What You Can Do327
- What You Need to Know327
- Configuring Queuing328
- Assign Priority Queue330
Chapter 50 Priority Queue330
- Priority Queue330
- Priority Queue Overview330
- What You Can Do330
- Bandwidth Control332
- Bandwidth Control Overview332
- Bandwidth Control Setup332
Chapter 51 Bandwidth Control332
- CIR and PIR332
- What You Can Do332
Chapter 52 Sflow334
- Sflow334
- Sflow Overview334
- Sflow Port Configuration334
- Add/Edit Sflow Collector336
- Sflow Collector Configuration336
- Spanning Tree Protocol338
- Spanning Tree Protocol Overview338
- What You Can Do338
- What You Need to Know338
- Spanning Tree Protocol Status341
- Spanning Tree Setup341
- Rapid Spanning Tree Protocol Status344
- Configure Rapid Spanning Tree Protocol346
- Multiple Rapid Spanning Tree Protocol Status348
- Configure Multiple Rapid Spanning Tree Protocol350
- Multiple Spanning Tree Protocol Status353
- Configure Multiple Spanning Tree Protocol355
- Add/Edit Multiple Spanning Tree357
- Multiple Spanning Tree Protocol Port Setup358
- Technical Reference359
- MST Region360
- MSTP Network Example360
- Common and Internal Spanning Tree (CIST)361
- MST Instance361
Chapter 54 Static MAC Filtering362
- Configure a Static MAC Filtering Rule362
- Static MAC Filtering362
- Static MAC Filtering Overview362
- What You Can Do362
- Add/Edit a Static MAC Filtering Rule363
Chapter 55 Static MAC Forwarding364
- Configure Static MAC Forwarding364
- Static MAC Forwarding364
- Static MAC Forwarding Overview364
- What You Can Do364
- Add/Edit Static MAC Forwarding Rules365
Chapter 56 VLAN366
- Vlan366
- VLAN Overview366
- What You Can Do366
- What You Need to Know366
- Introduction to IEEE 802.1Q Tagged Vlans367
- VLAN Status369
- VLAN Details370
- Configure a Static VLAN371
- Add/Edit a Static VLAN372
- VLAN Port Setup373
- Configure GVRP375
- Subnet Based Vlans376
- Add/Edit Subnet Based VLAN377
- Configuring Subnet Based VLAN377
- Protocol Based Vlans378
- Configuring Protocol Based VLAN379
- Add/Edit a Protocol Based VLAN380
- Voice VLAN381
- Add/Edit a Voice VLAN382
- MAC Based VLAN383
- Add/Edit a MAC Based VLAN384
- Add/Edit a Vendor ID Based VLAN385
- Vendor ID Based VLAN385
- Port-Based VLAN Setup386
- Configure a Port-Based VLAN387
Chapter 57 VLAN Isolation390
- Configuring VLAN Isolation390
- VLAN Isolation390
- VLAN Isolation Overview390
- Add/Edit a VLAN Isolation Rule391
Chapter 58 VLAN Mapping393
- VLAN Mapping393
- VLAN Mapping Example393
- VLAN Mapping Overview393
- What You Can Do393
- Enable VLAN Mapping394
- Add/Edit VLAN Mapping395
- VLAN Mapping Setup395
Chapter 59 VLAN Stacking397
- VLAN Stacking397
- VLAN Stacking Example397
- VLAN Stacking Overview397
- VLAN Stacking Port Roles398
- VLAN Tag Format398
- Configuring VLAN Stacking399
- Frame Format399
- Port-Based Q-In-Q401
- Selective Q-In-Q402
- Add/Edit Selective Q-In-Q403
- Networking404
- ARP Overview405
- ARP Setup405
Chapter 61 ARP Setup405
- What You Can Do405
- What You Need to Know405
- ARP Learning407
- Static ARP408
- Add/Edit Static ARP409
Chapter 62 DHCP411
- Dhcp411
- DHCP Overview411
- What You Can Do411
- What You Need to Know411
- Dhcpv4 Option 82 Profile412
- Dhcpv4 Relay Status412
- Add/Edit a Dhcpv4 Option 82 Profile413
- Configuring Dhcpv4 Smart Relay414
- Add/Edit Dhcpv4 Global Relay Port416
- DHCP Smart Relay Configuration Example416
- Dhcpv4 VLAN Setting418
- Add/Edit Dhcpv4 VLAN Port419
- Add/Edit Dhcpv4 VLAN Setting419
- Dhcpv6 Relay420
- Add/Edit Dhcpv6 Relay421
- DHCP Server Guard422
Chapter 63 Static Route424
- Static Route424
- Static Routing Overview424
- What You Can Do424
- Add/Edit Ipv4 Static Route425
- Ipv4 Static Route425
- Ipv6 Static Route426
- Add/Edit Ipv6 Static Route427
- Security428
- Aaa429
- Authentication, Authorization and Accounting (AAA)429
Chapter 65 AAA429
- What You Can Do429
- What You Need to Know429
- RADIUS Server Setup430
- TACACS+ Server Setup432
- AAA Setup434
- Technical Reference437
- Vendor Specific Attribute437
- Attributes Used for Authentication439
- Supported RADIUS Attributes439
- Attributes Used for Accounting440
- Access Control443
- Access Control Overview443
Chapter 66 Access Control443
- Service Access Control443
- What You Can Do443
- Remote Management444
- Account Security445
- SSH Overview447
- Technical Reference447
- Introduction to HTTPS449
- Google Chrome Warning Messages451
Chapter 67 Classifier453
- Classifier453
- Classifier Overview453
- What You Can Do453
- What You Need to Know453
- Classifier Setup454
- Classifier Status454
- Add/Edit a Classifier456
- Classifier Global Setting459
- Classifier Example460
Chapter 68 Policy Rule462
- Diffserv462
- DSCP and Per-Hop Behavior462
- Policy Rule462
- Policy Rules Overview462
- What You Can Do462
- Add/Edit a Policy Rule463
- Policy Rules463
- Policy Example466
- Anti-Arpscan468
- Anti-Arpscan Overview468
Chapter 69 Anti-Arpscan468
- What You Can Do468
- What You Need to Know468
- Anti-Arpscan Host Status469
- Anti-Arpscan Status469
- Anti-Arpscan Setup470
- Add/Edit Anti-Arpscan Trust Hosts472
- Anti-Arpscan Trust Host472
- BPDU Guard474
- BPDU Guard Overview474
- BPDU Guard Status474
Chapter 70 BPDU Guard474
- BPDU Guard Setup475
Chapter 71 Storm Control477
- Storm Control477
- Storm Control Overview477
- Storm Control Setup477
- What You Can Do477
Chapter 72 Error-Disable479
- CPU Protection Overview479
- Error-Disable479
- Error-Disable Overview479
- Error-Disable Recovery Overview479
- What You Can Do479
- Error-Disable Status480
- CPU Protection Setup481
- Error-Disable Detect Setup482
- Error-Disable Recovery Setup483
Chapter 73 IP Source Guard485
- IP Source Guard485
- IP Source Guard Overview485
- What You Can Do485
- What You Need to Know485
- Ipv4 Source Guard486
- Ipv4 Source Guard Static Binding486
- Add/Edit Ipv4 Source Guard Static Binding488
Chapter 74 DHCP Snooping489
- DHCP Snooping489
- DHCP Snooping Overview489
- DHCP Snooping Status489
- What You Can Do489
- DHCP Snooping Setup492
- DHCP Snooping Port Setup493
- DHCP Snooping VLAN Setup495
- Add/Edit DHCP Snooping VLAN Ports496
- DHCP Snooping VLAN Port Setup496
- DHCP Snooping Overview497
- Technical Reference497
- ARP Inspection500
- ARP Inspection Status500
Chapter 75 ARP Inspection500
- ARP Inspection Log Status501
- ARP Inspection VLAN Status501
- ARP Inspection Setup502
- ARP Inspection Port Setup504
- ARP Inspection VLAN Setup505
- Ipv6 Source Guard506
- Ipv6 Source Binding Status507
- Add/Edit Ipv6 Static Binding508
- Ipv6 Static Binding508
- Ipv6 Source Guard Policy509
- Add/Edit an Ipv6 Source Guard Policy510
- Ipv6 Source Guard Port Setup511
- Add/Edit a Ipv6 Snooping Policy512
- Ipv6 Snooping Policy Setup512
- Ipv6 Snooping VLAN Setup513
- Add/Edit an Ipv6 Snooping VLAN514
- Ipv6 DHCP Trust Setup514
- ARP Inspection Overview516
- Technical Reference516
Chapter 76 Port Authentication518
- Port Authentication518
- Port Authentication Overview518
- What You Can Do518
- MAC Authentication519
- What You Need to Know519
- Activate IEEE 802.1X Security520
- Activate MAC Authentication521
- Guest VLAN523
- Compound Authentication525
- IEEE 802.1X526
- Technical Reference526
- Radius527
- EAP (Extensible Authentication Protocol) Authentication528
- EAPOL (EAP over LAN)529
- About Port Security530
Chapter 77 Port Security530
- Port Security530
- Port Security Overview530
- Port Security Setup530
- Certificates533
Chapter 78 MAINTENANCE533
- Maintenance533
- Overview533
- What You Can Do533
- HTTPS Certificates534
- Filename Conventions535
- FTP Command Line535
- Technical Reference535
- FTP Command Line Procedure536
- Cluster Management Overview537
- FTP Restrictions537
- GUI-Based FTP Clients537
- Cluster Management Status538
- What You Can Do538
- Clustering Management Setup539
- Cluster Member Switch Management541
- Technical Reference541
- Backup Configuration543
- Restore Configuration543
- Auto Configuration544
- Erase Running-Configuration545
- Save Configuration546
- Configure Clone547
- Diagnostic548
- Firmware Upgrade550
- Reboot System552
- Tech-Support553
- Tech-Support Download554
Chapter 79 Networked AV Mode556
- Help556
- Overview556
- Summary556
- Monitor558
- System Information558
- What You Can Do558
- System560
- What You Can Do560
- Cloud Management561
- General Setup563
- IP Setup565
- Add/Edit IP Interfaces566
- Logins567
- Configure SNMP569
- Configure SNMP User571
- Add/Edit SNMP User572
- Configure SNMP Trap Group573
- Enable or Disable Sending of SNMP Traps on a Port574
- Port575
- Link Aggregation576
- Link Aggregation Status576
- What You Can Do576
- Link Aggregation Setting578
- Link Aggregation Control Protocol579
- Poe Status581
- Poe Setup583
- Port Setup586
- Port Mirroring588
- Switching588
- Ipv4 Multicast Status589
- Multicast589
- What You Can Do589
- IGMP Snooping590
- IGMP Snooping VLAN594
- Add/Edit IGMP Snooping Vlans595
- IGMP Filtering Profile596
- Add IGMP Filtering Profile597
- Add IGMP Filtering Rule597
- Vlan598
- What You Can Do598
- What You Need to Know598
- VLAN Status601
- VLAN Details602
- Configure a Static VLAN603
- Add/Edit a Static VLAN604
- VLAN Port Setup605
- Access Control606
- Security606
- Service Access Control607
- What You Can Do607
- Remote Management608
- Storm Control609
- Maintenance610
- Backup Configuration611
- Restore Configuration611
- What You Can Do611
- Save Configuration612
- Firmware Upgrade613
- Reboot System613
- Tech-Support614
- Tech-Support Download615
- Part III: Troubleshooting and Appendices616
Chapter 80 Troubleshooting617
- Power, Hardware Connections, and Leds617
- Switch Access and Login618
- Switch Configuration620
Appendix A Customer Support621
Appendix B Common Services626
Appendix C Ipv6629
Appendix D Legal Information638
- Index643

ZyXEL Communications XGS2220 Series - Page 467

Table of Contents

Related product manuals