Using Condition Groups in Policies Configuring QoS
page 30-42 OmniSwitch 6800/6850/9000 Network Configuration Guide March 2008
Using Condition Groups in Policies
Condition groups are made up of multiple IPv4 addresses, MAC addresses, services, or ports to which you
want to apply the same action or policy rule. Instead of creating a separate condition for each address, etc.,
create a condition group and associate the group with a condition. Groups are especially useful when
configuring filters, or Access Control Lists (ACLs); they reduce the number of conditions and rules that
must be entered. For information about setting up ACLs, see Chapter 31, “Configuring ACLs.”
Commands used for configuring condition groups include the following:
policy network group
policy service group
policy mac group
policy port group
ACLs
Access Control Lists (ACLs) typically use condition groups in policy conditions to reduce the number
of rules required to filter particular types of traffic. For more information about ACLs, see Chapter 31,
“Configuring ACLs.”
Sample Group Configuration
1 Create the group and group entries. In this example, a network group is created:
-> policy network group netgroup1 10.10.5.1 10.10.5.2
2 Attach the group to a policy condition. For more information about configuring conditions, see “Creat-
ing Policy Conditions” on page 30-33.
-> policy condition cond3 source network group netgroup1
Note. (Optional) Use the show policy network group command to display information about the network
group. Each type of condition group has a corresponding show command. For example:
-> show policy network group
Group Name: From Entries
Switch blt 4.0.1.166
10.0.1.166
+netgroup1 cli 10.10.5.1/255.255.255.0
10.10.5.2/255/255/255.0
See the OmniSwitch CLI Reference Guide for more information about the output of this display. See
“Verifying Condition Group Configuration” on page 30-50 for more information about using show
commands to display information about condition groups.
To Next Page
Loading...
