Classify Traffic Based on VLAN ID or Priority

PacketWise has the ability to classify application traffic within multiple virtual LANs on a single Ethernet segment (an 802.1Q trunk) and ISL (Inter-Switch Link, a Cisco protocol), as well as classify by VLAN priority. You can create a VLAN identification matching rule that is based on a single VLAN ID or priority, a range of IDs or priorities, or any ID or priority.

For a multiple VLAN environment (where packets passing through the unit will have more than one VLAN header), only the outermost VLAN header is used for classification. The other headers are ignored. If packets will be tagged with multiple VLAN headers, be sure to verify that the additional header information does not create a final packet size greater than 1548 bytes before the packet reaches the PacketShaper. (PacketWise can accept packets up to 1548 bytes in size and will drop any packets that exceed this size.)

Note: To perform these tasks from PolicyCenter, you must first select a configuration from the Editing Configuration drop-down list at the top of the page.

VLAN Identification (802.1Q or ISL)

To set up a VLAN identification matching rule:

1. When creating a class or adding a matching rule, click VLAN. The Matching Rule: VLAN window opens.  show screen

2. Select the VLAN type: 802.1Q/p or ISL.

3. In the VLAN id field, enter one of the following:

• To specify a single VLAN ID, enter a number between 0–4095 for 802.1Q or between 0–32767 for ISL.
• To specify a range of VLAN IDs, enter the first and last numbers, separated by a dash (for example, 100-200)
• To match any traffic flow that has a VLAN ID, type any.

4. Click OK.

5. Click add class or add rule.

VLAN Priority (802.1p)

To set up a VLAN priority matching rule:

1. When creating a class or adding a matching rule, click VLAN. The Matching Rule: VLAN window opens.  Show screen

2. Select 802.1Q/p for the VLAN type.

3. In the VLAN Priority field, enter one of the following:

• To specify a single VLAN priority, enter a number between 0–7.
• To specify a range of VLAN priorities, enter the first and last numbers, separated by a dash (for example, 1-3).
• To match any traffic flow that has a VLAN priority tag, type any.

4. Click OK.

5. Click add class or add rule.

Once the VLAN class is created, you can enable discovery within the class to discover all applications running over this VLAN that have the ID or priority you specified in the matching rule.

See also:

Create VLAN Policies