2 acl profile actions, 2 acl setup screen – ZyXEL Communications IES-708-22A User Manual
Page 210
Chapter 32 ACL
IES-708-22A User’s Guide
210
•
•
•
If you apply multiple profiles to a PVC, the IES-708-22A checks the profiles by rule number.
The lower the rule number, the higher the priority the rule (and profile) has. For example, there
are two ACL profiles assigned to a PVC. Profile1 is for VLAN ID 100 (rule number 9) traffic,
and Profile2 is for IEEE 802.1p priority 0 traffic (rule number 12). The IES-708-22A checks
Profile1 first. If the traffic is VLAN ID 100, the IES-708-22A follows the action in Profile1
and does not check Profile2. You cannot assign profiles that have the same rule numbers to the
same PVC.
32.1.2 ACL Profile Actions
The IES-708-22A can perform the following actions after it classifies upstream traffic.
• rate
• rvlan
• rpri
• deny: do not forward the packet
The IES-708-22A can apply more than one action to a packet, unless you select deny.
If you select the rvlan action, the IES-708-22A replaces the VLAN ID before it compares the
VLAN ID of the packet to the VID of the PVC. As a result, it is suggested that you replace
VLAN ID on super channels, not normal PVC, since super channels accept any tagged traffic.
If you replace the VLAN ID for a normal PVC, the IES-708-22A drops the traffic because the
new VLAN ID does not match the VID of the PVC. This is illustrated in the following
scenario.
There is a normal PVC, and its PVID is 900. You create an ACL rule to replace the VLAN ID
with 901. Initially, the traffic for the PVC belongs to VLAN 900. Then, the IES-708-22A
checks the ACL rule and changes the traffic to VLAN 901. When the IES-708-22A finally
compares the VLAN ID of the traffic (901) to the VID of the PVC (900), the IES-708-22A
drops the packets because they do not match.
32.2 ACL Setup Screen
Use this screen to assign ACL profiles to each PVC. To open this screen, click Advanced
Application > ACL.