# IP Classification Configuration

Juniper Networks virtual systems support two kinds of traffic classifications: VLAN-based and IP-based, both of which can function exclusively or concurrently.

With the VLAN-based traffic classification, a device uses VLAN tagging to direct traffic to various subinterfaces and dedicated physical interfaces bound to different systems, and to physical interfaces shared by all systems.

IP-based traffic classification allows you to direct traffic to virtual systems without VLANs. Instead of VLAN tags, the security device uses IP addresses to sort traffic, associating a subnet or range of IP addresses with a particular system—root or vsys.

### To Configure IP Classification

1. Enter the necessary information:

System: Select either the root system or a preconfigured virtual system from the drop-down list.

Address Type: Select either Subnet and then enter an IP address and netmask, or Range and enter the beginning and ending IP addresses.

- Subnet: Associates the selected system with the IP addresses in the specified subnet.

- Range: Associates the selected system with the specified range of IP addresses.

2. Click OK to save your configuration.

## IP Classification List

The IP classification table lists all systems (root and virtual) configured for IP classification and the following information about each one:

Vsys: Indicates either the root system or the name of a virtual system.

Type: Indicates that the system uses either a subnet or address range for IP classification.

IPs: Lists an IP address/netmask for a subnet or a range of IP addresses associated with a particular system.
Configure: Click Remove to delete an IP classification entry.

For information, see Vsys List.