53

Chapter 5: Configuring the Switch through the Web Utility

DiffServ

24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet

DiffServ Policy Map

This function creates a policy map that can be attached to multiple interfaces.

Modify Name and Description

. Configures the name and a brief description of a policy map. (Range: 1-32

characters for the name; 1-256 characters for the description)

Edit Classes

. Opens “Policy Rule Settings” for the selected class entry. Modify the criteria used to service

ingress traffic.

Add Policy

. Opens “Policy Configuration”. Enter a policy name and description and click

Add

to open “Policy Rule

Settings”. Enter the criteria used to service ingress traffic.

Remove Policy

. Deletes a specified policy.

Click

Add Policy

to create a new policy, or select a policy and click

Edit Classes

to change the policy rules of the

selected policy, or

Remove Policy

to delete the policy.

Adding a Policy

Policy Name

. Name of policy map. (Range: 1-32 characters)

Description

. A brief description of a policy map. (Range: 1-256 characters)

Add

. Adds the specified policy.

Back

. Returns to previous screen without making any changes.

Enter the policy name and description into the textfields provided in the Add Policy screen, then click

Add

Setting Rules

Class Name

. Name of class map.

Action

. Shows the service provided to ingress traffic by setting a CoS, DSCP, or IP Precedence value in a

matching packet.

Figure 5-35: DiffServ - Diffserv Policy Map

Figure 5-36: DiffServ Policy Map - Adding a Policy

54

Chapter 5: Configuring the Switch through the Web Utility

DiffServ

24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet

Meter

. The maximum throughput and burst rate.

•

Rate (kbps) – Rate in kilobits per second.

•

Burst (byte) – Burst in bytes.

Exceed Action

. Specifies whether the traffic that exceeds the specified rate will be dropped or the DSCP service

level will be reduced.

Remove Class

. Deletes a class.

Class Name

. Name of class map.

Action

. Configures the service provided to ingress traffic by setting a CoS, DSCP, or IP Precedence value in a

matching packet. (Range - CoS: 0-7, DSCP: 0-63, IP Precedence: 0-7)

Meter

. Check this to define the maximum throughput, burst rate, and the action that results from a policy

violation.

•

Rate (kbps) – Rate in kilobits per second. (Range: 1-100000 kbps or maximum port speed, whichever is

lower)

•

Burst (byte) – Burst in bytes. (Range: 64-1522)

Exceed

. Specifies whether the traffic that exceeds the specified rate or burst will be dropped or the DSCP service

level will be reduced.

•

Set – Decreases DSCP priority for out of conformance traffic. (Range: 0-63).

•

Drop – Drops out of conformance traffic.

Add

. Adds the specified criteria to the policy map.

Add classes to a selected policy and set the Action, Meter, Rate, Burst and Exceed values using the drop-down

menus and textfields provided then click

Add

.

Figure 5-37: DiffServ Policy Map - Setting Rules

55

Chapter 5: Configuring the Switch through the Web Utility

DiffServ

24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet

DiffServ Service Policy

This function binds a policy map to the ingress queue of a particular interface.

Check

Enabled

and choose a Policy Map for a port from the drop-down menu.

Click

Submit

to save the changes.

Figure 5-38: DiffServ - Diffserv Service Policy

56

Chapter 5: Configuring the Switch through the Web Utility

Security

24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet

Security

The Security tab includes links to the following screens.

•

ACL Conf.

•

ACL Port Binding

•

802.1xUsers

•

802.1xPort Conf.

•

Radius Server

•

Port Security

•

Storm Control

•

HTTPS Settings

•

System Password

ACL Conf.

Access Control Lists (ACL) provide packet filtering for IP frames (based on address, protocol, Layer 4 protocol port

number or TCP control code) or any frames (based on MAC address or Ethernet type). To filter incoming packets,

first create an access list, add the required rules, specify a mask to modify the precedence in which the rules are

checked, and then bind the list to a specific port.

Enter an ACL name in the Name field (with up to 16 characters), select the list type (IP Standard, IP Extended, or

MAC), and click

Add

to open the configuration screen for the new list.

Figure 5-39: Security - ACL Conf

57

Chapter 5: Configuring the Switch through the Web Utility

Security

24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet

Standard ACL

To configure a standard ACL do the following.

Specify the action (that is, Permit or Deny). Select the address type (Any, Host, or IP). If you select “Host,” enter a

specific address. If you select “IP,” enter a subnet address and the mask for an address range. Then click

Add

.

Extended ACL

To configure an extended ACL do the following.

Specify the action (that is, Permit or Deny). Specify the source and/or destination addresses. Select the address

type (Any, Host, or IP). If you select “Host,” enter a specific address. If you select “IP,” enter a subnet address and

the mask for an address range. Set any other required criteria, such as service type, protocol type, or TCP control

code. Then click

Add

.

Action

. An ACL can contain any combination of permit or deny rules.

Source Address/Destination Type

. Specifies the source or destination IP address. Use “Any” to include all

possible addresses, “Host” to specify a specific host address in the Address field, or “IP” to specify a range of

addresses with the Address and SubMask fields. (Options: Any, Host, IP; Default: Any)

Source/Destination IP Address

. Source or destination IP address.

Source/Destination Subnet Mask

. Subnet mask for source or destination address.

Service Type

. Packet priority settings based on the following criteria:

•

Precedence – IP precedence level. (Range: 0-7)

•

TOS – Type of Service level. (Range: 0-15)

•

DSCP – DSCP priority level. (Range: 0-63)

Figure 5-40: ACL Conf - Adding/Editing Standard ACL

Figure 5-41: ACL Conf - Adding/Editing Extended ACL