Allied Telesis AT-S63 User Manual

Page 312

Advertising
background image

Chapter 17: Classifier Commands

312

Section II: Advanced Operations

tcpsport

Defines a traffic flow by a source TCP port.

tcpdport

Defines a traffic flow by a destination TCP port.

udpsport

Defines a traffic flow by a source UDP port.

udpdport

Defines a traffic flow by a destination UDP port.

tcpflags

Defines a traffic flow by a TCP flag. Options are

URG - Urgent
ACK - Acknowledgement
RST - Reset
PSH - Push
SYN - Synchronization
FIN - Finish

Description

This command is used to create classifiers. Classifiers define traffic flows
for access control lists (ACL) and Quality of Service policies. A traffic flow
consists of packets that share one or more characteristics. Traffic flows
can range from being very broad to very specific. An example of the
former might be all IP traffic while an example of the latter could be
packets with specific source and destination MAC addresses.

A classifier without any defined parameters applies to all packets.

The ANY option of the parameters is used to delete the current setting of a
parameter without setting a new value.

Examples

This command creates a classifier for all IP traffic:

create classifier=4 description=”IP flow” protocol=ip

This command creates a classifier for all traffic originating from the subnet
149.22.22.0 destined to the device with the IP address 149.44.44.11:

create classifier=4 description=”subnet flow”
ipsaddr=149.22.22.0/24 ipdaddr=149.44.44.11

This command creates a classifier for all HTTPS web traffic with a
destination IP address of 149.44.44.44:

create classifier=7 description=”HTTPS flow”
ipdaddr=149.44.44.44 tcpdport=443

Advertising