Enterasys Matrix DFE-Gold Series

Assigning Classification Rules to Policy Profiles set policy rule
8-14 Policy Classification Configuration
Defaults
•Ifmaskisnotspecified,alldatabitswillbeconsideredrelevant.
•Ifport‐stringisnotspecified,rulewillbescopedtoallports.
Mode
Switchcommand,Read‐Write.
Usage
Classificationrulesareautomaticallyenabledwhencreated.
Examples
ThisexampleshowshowtouseTable 8‐3tocreate(andenable)aclassificationruletoassociate
withpolicynumber1.ThisrulewillfilterEthernetIIType1526framestoVLAN7:
Matrix(rw)->set policy rule 1 ether 1526 vlan 7
ThisexampleshowshowtouseTable 8‐3tocreate(andenable)aclassificationruletoassociate
withpolicyprofilenumber5.ThisrulespecifiesthatUDPframesfromsourceport45willbe
filteredtoVLAN7:
Matrix(rw)->set policy rule 5 udpportsourceip 45 vlan 7
Thisexampleshowshowtoconfigureclassificationrule2asanadministrativeprofileandassign
ittoingressportfe.1.1:
Matrix(rw)->set policy rule admin-profile port fe.1.1 port-string fe.1.1 admin-
pid 2
Matrix(rw)->set policy rule admin-profile ether 1526 admin-pid 2
Table 8‐3providesthesetpolicyruledatavaluesthatcanbeenteredforaparticularclassification
type,andthemaskbitsthatcanbeenteredforeachclassifierassociatedwiththatparameter.
port‐stringport‐string (Optional)Ifadmin‐profileisspecified,appliesthisadministratively‐
assignedruletoaspecificingress
port.
Note: Enterasys Matrix Series devices with firmware versions 3.00.xx and
higher also support this alternative command to administratively assign a profile
rule to a port:
set policy port port-string admin-id
storage‐typenon‐
volatile|volatile
Addsorremovesthisentryfromnon‐volatilestora ge.
vlanvlan ClassifiestoaVLANID.
drop|forward Specifiesthatpacketswithinthisclassificationwillbedroppedor
forwarded.
admin‐pidadmin‐pid Ifadmin‐profileisspecified,associatesthisrulewithapolicyprofile
indexID.
Validvaluesare1‐1023.
coscos Specifiesthatthi srulewillclassifytoaClass‐of‐ServiceID.Validvalues
are0‐255,andcanbeconfiguredusingthesetcossettingscommand
asdescribedin“setcossettings”onpage 8‐39.Avalueof‐1indicates
that
noCoSforwardingbehaviormodificationisdesired.