Cisco Sg3008 Manual

Access Control
IPv6-Based ACLs
483 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
24
-DSCP to Match—Differentiated Ser ves Code Point (DSCP) to match
-
IP Precedence to match—IP precedence is a model of TOS (type of 
service) that the network uses to help provide the appropriate QoS 
commitments. This model uses the 3 most significant bits of the service 
type byte in the IP header, as described in RFC 791 and RFC 1349.
•ICMP—If the IP protocol of the...

Access Control
IPv6-Based ACLs
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  484
24
 
NOTEACLs are also used as the building elements of flow definitions for per-flow QoS 
handling (see QoS Advanced Mode).
Defining an IPv6-based ACL
To define an IPv6-based ACL:
STEP 1Click Access Control > IPv6-Based ACL.
This window contains the list of defined ACLs and their contents
STEP  2Click Add.
STEP  3Enter the name of a new ACL in the ACL Name field. The...

Access Control
IPv6-Based ACLs
485 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
24
•Time Range—Select to enable limiting the use of the ACL to a specific time 
range.
•Time Range Name—If Time Range is selected, select the time range to be 
used. Time ranges are described in the Time Range section.
•Protocol—Select to create an ACE based on a specific protocol. Select Any 
(IPv6) to accept all IP protocols. Otherwise select one of the following...

Access Control
IPv6-Based ACLs
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  486
24
 
-Range—Select a range of TCP/UDP source ports to which the packet is 
matched.
•Destination Port—Select one of the available values. (They are the same as 
for the Source Port field described above).
NOTEYou must specify the IPv6 protocol for the ACL before you can 
configure the source and/or destination port. 
•TCP Flags—Select one or more TCP flags with which to...

Access Control
Defining ACL Binding
487 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
24
Defining ACL Binding
When an ACL is bound to an interface (port, LAG or VLAN), its ACE rules are applied 
to packets arriving at that interface. 
Packets that do not match any of the ACEs in 
the ACL are matched to a default rule, whose action is to drop unmatched packets. 
Although each interface can be bound to only one ACL, multiple interfaces can be 
bound to...

Access Control
Defining ACL Binding
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  488
24
 
•Default Action—Select one of the following options:
-Deny Any—If packet does not match an ACL, it is denied (dropped).
-Permit Any—If packet does not match an ACL, it is permitted 
(forwarded).
NOTEDefault Action can be defined only if IP Source Guard is not activated 
on the interface.
STEP  6Click Apply. The ACL binding is modified, and the Running...

25
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  489
 
Quality of Service 
The Quality of Service feature is applied throughout the network to ensure that 
network traffic is prioritized according to required criteria and the desired traffic 
receives preferential treatment.
This section covers the following topics:
•QoS Features and Components
•Configuring QoS - General
•QoS Basic Mode
•QoS Advanced Mode
•Managing QoS Statistics 

Quality of Service
QoS Features and Components
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  490
25
 
QoS Features and Components
The QoS feature is used to optimize network performance.
QoS provides the following:
•Classification of incoming traffic to traffic classes, based on attributes, 
including:
-Device Configuration
-Ingress interface
-Packet content
-Combination of these attributes
QoS includes the following:
•Traffic...

Quality of Service
QoS Features and Components
491 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
25
QoS Modes
The QoS mode that is selected applies to all interfaces in the system.
•Basic Mode—Class of Service (CoS).
All traffic of the same class receives the same treatment, which is the single 
QoS action of determining the egress queue on the egress port, based on 
the indicated QoS value in the incoming frame. This can be the VLAN 
Priority Tag...

Quality of Service
QoS Features and Components
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  492
25
 
•When disabling QoS, the shaper and queue setting (WRR/SP bandwidth 
setting) are reset to default values.
All other user configurations remain intact.
QoS Workflow
To configure general QoS parameters, perform the following:
STEP 1Choose the QoS mode (Basic, Advanced, or Disabled, as described in the “QoS 
Modes” section) for the system by using the...