Kaspersky SD-WAN

Managing traffic classification rules

To display the table of traffic classification rules, go to the Infrastructure menu section, click Management → Configuration menu next to the controller, go to the Traffic filters section, and select the Rules tab. Information about traffic classification rules is displayed in the following columns of the table:

  • Name is the name of the traffic classification rule.
  • L2 fields are L2 fields whose values the traffic classification rule uses to identify traffic from the general data stream.
  • L3 fields are L3 fields whose values the traffic classification rule uses to identify traffic from the general data stream.
  • L4 fields are L4 fields whose values the traffic classification rule uses to identify traffic from the general data stream.

The actions you can perform with the table are described in the Managing solution component tables instructions.

In this section

Creating a traffic classification rule

Editing a traffic classification rule

Deleting a traffic classification rule

Page top
[Topic 261427]

Creating a traffic classification rule

To create a traffic classification rule:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.

    This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

  3. Go to the Traffic filters section.

    A table of traffic filters is displayed.

  4. Select the Rules tab.

    A table of traffic classification rules is displayed.

  5. In the upper part of the page, click + Qualification rule.
  6. This opens a window; in that window, in the Name field, enter the name of the traffic classification rule.
  7. On the L2 fields tab, select the check boxes next to the L2 fields whose values the traffic classification rule uses to identify traffic in the overall data stream. If the check box is selected, enter or select the field value. You can use the values of the following fields to identify traffic in the overall data stream:
    • Outer VLAN ID. Range of values: 1 to 2094.
    • Outer VLAN PCP. Range of values: 0 to 7.
    • Source MAC.
    • Source MAC mask.
    • Destination MAC.
    • Destination MAC mask.
    • Ethertype:
      • 0x0800. Default value.
      • 0x86dd
      • 0x0806
  8. On the L3 fields tab, select the check boxes next to the L3 fields whose values the traffic classification rule uses to identify traffic in the overall data stream. If the check box is selected, enter or select the field value. You can use the values of the following fields to identify traffic in the overall data stream.
    • Protocol:
      • IPv4
      • IPv6
    • Source IP.
    • Source IP prefix length. Range of values for the IPv4 address: 0 to 32; for IPv6 address: 0 to 128
    • Destination IP.
    • Destination IP prefix length. Range of values for the IPv4 address: 0 to 32; for IPv6 address: 0 to 128
    • DSCP
    • TOS
  9. On the L4 fields tab, select the check boxes next to the L4 fields whose values the traffic classification rule uses to identify traffic in the overall data stream. If the check box is selected, enter or select the field value. You can use the values of the following fields to identify traffic in the overall data stream:
    • IP protocol
    • Source port list
    • Destination port list
    • ICMP type number
  10. On the DPI tab, select the Application check box and select the application whose traffic the traffic classification rule identifies in the overall data stream:
  11. Click Create.

The traffic classification rule is created and displayed in the table.

You can specify a traffic classification rule when creating or editing a traffic filter to make the traffic filter use this traffic classification rule.

Example of a created traffic classification rule:

You can create a traffic classification rule with the following parameters:

  • On the L2 fields tab, in the Outer VLAN ID field, enter 1.
  • On the L2 fields tab, in the Outer VLAN PCP field, enter 3.
  • On the L3 fields tab, in the Protocol drop-down list, select IPv4.
  • On the L3 fields tab, in the Source IP field, enter the 192.168.2.0/24 IP address.

The traffic classification rule identifies traffic with the following properties in the overall data stream:

  • Outer VLAN tag — 1
  • Outer PCP tag — 3
  • Protocol — IPv4
  • Source IP address — 192.168.2.0/24

The traffic classification rule does not identify traffic that lacks at least one of these properties in the overall data stream.

See also

Scenario: Directing application traffic to a transport service

Page top
[Topic 246479]

Editing a traffic classification rule

To edit a traffic classification rule:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the Traffic filters section.

    A table of traffic filters is displayed.

  4. Select the Rules tab.

    A table of traffic classification rules is displayed.

  5. Click Management → Edit next to the traffic classification rule that you want to edit.
  6. This opens a window; in that window, if necessary, edit the traffic classification rule settings. For a description of the settings, see the instructions for creating a traffic classification rule.
  7. Click Save.

The traffic classification rule rule is modified and updated in the table.

Page top
[Topic 256625]

Deleting a traffic classification rule

Deleted traffic classification rules cannot be restored.

To delete a traffic classification rule:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the Traffic filters section.

    A table of traffic filters is displayed.

  4. Select the Rules tab.

    A table of traffic classification rules is displayed.

  5. Click Management → Delete next to the traffic classification rule that you want to delete.
  6. In the confirmation window, click Delete.

The traffic classification rule is deleted and is no longer displayed in the table.

Page top
[Topic 256627]