Enterasys Matrix DFE-Gold Series Configuration Guide 8-1
8
Policy Classification Configuration
ThischapterdescribesthePolicyClassificationsetofcommandsandhowtousethem.
Policy Classification Configuration Summary
EnterasysMatrixSeriesdevicessupportpolicyprofile‐basedprovisioningofnetworkresources
byallowingITadministratorsto:
•Create,changeorremoveuserprofilesbasedonbusiness‐specificuseofnetworkservices.
•Permitordenyaccesstospecificservicesbycreatingandassigningclassificationruleswhich
mapuserprofilestoprotocol‐basedframe
filteringpoliciesconfiguredforaparticularVLAN
orClassofService(CoS).
• Assignorunassignportstopolicyprofilessothatonlyportsactivatedforaprofilewillbe
allowedtotransmitframesaccordingly.
• ConfigureCoStoautomaticallyassignpolicy‐basedinboundratelimitersandtransmit
queues.
Note: It is recommended that you use Enterasys NetSight Policy Manager as an alternative to CLI
for configuring policy classification on the Enterasys Matrix Series devices.
For information about... Refer to page...
Policy Classification Configuration Summary 8-1
Configuring Policy Profiles 8-2
Assigning Classification Rules to Policy Profiles 8-7
Configuring Policy Class of Service (CoS) 8-21
Configuring Policy-Based Routing 8-42
Configuring Policy-Based Routing 8-42
Note: Enterasys Matrix Series devices also support policy-based routing, which forwards or drops
packets at Layer 3 according to matching access lists (ACLs) in route maps configured on routing
interfaces. For details, refer to “Configuring Denial of Service (DoS) Prevention” on page 24-22.