Policy Plan

Traffic Policy Plan

Planning application groups

Precise identification of applications on a network is the prerequisite and basis for network services such as intelligent traffic steering, QoS, application optimization, and security. Service policies can be applied in subsequent service processes only after applications are identified.

When configuring policies, you need to select an application group before selecting an application.

When creating an application group, you need to add predefined or customized applications to the customized application group. An application can be added to only one application group. However, the following requirements must be met when you configure ACL policies, QoS policies, intelligent traffic steering policies, Internet access policies at a site, and application quality monitoring policies:

1. Applications in application groups of traffic classifiers in ACL policies, QoS policies, and Internet access policies of the same site must be different.
2. Applications in application groups of traffic classifiers must be different from each other between different ACL policies, QoS policies, intelligent traffic steering policies, application quality monitoring policies, or Internet access policies of the same site.

In this document, two application groups that contain the VoIP and Software_Update applications, respectively, are used as examples.

Planning traffic classifiers

A traffic classifier defines a group of matching rules to classify packets. This ensures that a device processes packets matching the same traffic classifier identically.

When configuring a traffic policy, you need to use the created traffic classifier.

In this example, three traffic classifiers are created: one corresponding to the VoIP application group, one corresponding to the Software_Update application group, and one for LAN-side devices at branch sites to go online.

Planning Internet access for sites

To ensure that LAN-side devices at branch sites can automatically register with iMaster NCE-Campus and go online during site deployment, enable the Internet access function for the sites on the VN.

Planning intelligent traffic steering

After an intelligent traffic steering policy is configured, traffic can be automatically switched between the primary and secondary links when link congestion occurs and the requirements of a specified application cannot be met. This ensures the experience of key applications.

In this example, VoIP service traffic is preferentially transmitted over the MPLS link, and Software_Update service traffic is preferentially transmitted over the Internet link.

Planning QoS

QoS is a mainstream function that implements differentiated services. Data packets are classified into different priorities or multiple classes of service (CoSs) through traffic classification. These priorities and CoSs are the prerequisite and basis for differentiating service models. Different traffic policies can be configured based on packet priorities and CoSs to provide different services.

In this example, QoS policies are configured for the overlay network based on queue priorities. VoIP service traffic is transmitted in the queue with the highest priority so that the traffic can be preferentially forwarded.

Security Policy Plan

URL filtering regulates online behaviors by controlling URLs that users can access and permitting or denying users' access to some web resources.

In this example, the access to the website www.xxx.com is denied.