1.1.4 Flow detection conditions

To perform flow detection, specify the conditions for identifying the flow in the configuration. The following describes the flow detection conditions for the receiving-side and sending-side interfaces.

<Structure of this section>

(1) Flow detection condition of the receiving interface

The following table describes the flow detection conditions that can be specified for a receiving interface.

Table 1-3: Flow detection conditions that can be specified for a receiving interface
Type		Configuration items
MAC conditions	Configuration	VLAN ID^#1
	MAC header	Source MAC address
		Destination MAC address
		Ethernet type
		User priority*2
IPv4 conditions	Configuration	VLAN ID^#1
	MAC header	User priority*2
	IPv4 header #3	Upper-layer protocol
		Source IP address
		Destination IP address
		ToS
		DSCP
		Precedence
	IPv4-TCP header	Source port number
		Destination port number
		TCP control flag*4
	IPv4-UDP header	Source port number
	IPv4-UDP header	Destination port number
	IPv4-ICMP header	ICMP type value
	IPv4-ICMP header	ICMP code value
IPv6 conditions	Configuration	VLAN ID^#1
	MAC header	User priority*2
	IPv6 header #5	Upper-layer protocol
		Source IP address
		Destination IP address
		Traffic class
		DSCP
	IPv6-TCP header	Source port number
		Destination port number
		TCP control flag*4
	IPv6-UDP header	Source port number
	IPv6-UDP header	Destination port number
	IPv6-ICMP header	ICMP type value
	IPv6-ICMP header	ICMP code value

#1

VLAN IDs that can be detected by flow detection on the Switch are the values assigned to the VLANs entered in the VLAN configuration. The ID of the VLAN to which received frames belong will be detected.

#2

The user priority cannot be detected for the following frames,

- Frames that do not have a VLAN tag

The user priority for a frame that has multiple VLAN tags is detected by counting from the MAC address side.The first VLAN tag encountered will be detected. The following figure shows an example of a frame that has multiple VLAN tags.

[Figure Data]

#3

Supplementary note for the ToS field specification

These are 3-bit to 6-bit numbers in ToS :ToS field.

Priority: Value of the three highest-order bits in the ToS field.

[Figure Data]

DSCP: Value of the six highest-order bits in the ToS field.

[Figure Data]

#4

Packets whose ack, fin, psh, rst, syn, or urg flag is set to 1 are detected.

#5

Supplementary note for the traffic class field specification

Traffic class: The value of the traffic class field.

[Figure Data]

DSCP: Value of the six highest-order bits in the traffic class field.

[Figure Data]

(2) Flow detection condition of the sending interface

The following table describes the flow detection conditions that can be specified for the sending interface. However, filter entries cannot be applied to VLAN interfaces for which Tag translation is set for any one of the Ethernet interfaces belonging to the relevant VLAN.

Table 1-4: Flow detection conditions that can be specified for a sending interface
Type		Configuration items
MAC conditions	Configuration	VLAN ID^#1
	MAC header	Source MAC address
		Destination MAC address
		Ethernet type
		User priority*2
IPv4 conditions	Configuration	VLAN ID^#1
	MAC header	User priority*2
	IPv4 header #3	Upper-layer protocol
		Source IP address
		Destination IP address
		ToS
		DSCP
		Precedence
	IPv4-TCP header	Source port number
		Destination port number
		TCP control flag*4
	IPv4-UDP header	Source port number
	IPv4-UDP header	Destination port number
	IPv4-ICMP header	ICMP type value
	IPv4-ICMP header	ICMP code value
IPv6 conditions	Configuration	VLAN ID^#1
	MAC header	User priority*2
	IPv6 header #5	Upper-layer protocol
		Source IP address
		Destination IP address
		Traffic class
		DSCP
	IPv6-TCP header	Source port number
		Destination port number
		TCP control flag*4
	IPv6-UDP header	Source port number
	IPv6-UDP header	Destination port number
	IPv6-ICMP header	ICMP type value
	IPv6-ICMP header	ICMP code value

#1

VLAN IDs that can be detected by flow detection on the Switch are the values assigned to the VLANs entered in the VLAN configuration. The ID of the VLAN to which the outgoing frames belong will be detected.

You cannot specify a VLAN ID for either of the following interfaces:

- Ethernet interfaces for which tag translation is set

- Ethernet interfaces for which VLAN tunneling is set

#2

The user priority set in the VLAN tag of the send frame is detected. The user priority for a frame that has multiple VLAN tags is detected by counting from the MAC address side.The first VLAN tag encountered will be detected. The following figure shows an example of a frame that has multiple VLAN tags.

[Figure Data]

Frames with VLAN Tag for which markers (rewriting user priority) have been executed at the receiving end are detected with the user priority after the markers. Frames without VLAN Tag do not detect user priorities.

#3

Supplementary note for the ToS field specification

These are 3-bit to 6-bit numbers in ToS :ToS field.

Priority: Value of the three highest-order bits in the ToS field.

[Figure Data]

DSCP: Value of the six highest-order bits in the ToS field.

[Figure Data]

When the marking functionality is used to update a DSCP on the receiving-side interface, the values of ToS, DSCP, and Precedence for the sending-side interface are detected for the frames after the DSCP is updated.

#4

Packets whose ack, fin, psh, rst, syn, or urg flag is set to 1 are detected.

#5

Supplementary note for the traffic class field specification

Traffic class: The value of the traffic class field.

[Figure Data]

DSCP: Value of the six highest-order bits in the traffic class field.

[Figure Data]