SecureStack B3 Configuration Guide 10-1
10
Policy Classification Configuration
ThischapterdescribesthePolicyClassificationsetofcommandsandhowtousethem.
Policy Classification Configuration Summary
SecureStackB3devicessupportpolicyprofile‐basedprovisioningofnetworkresourcesby
allowingITadministratorsto:
•Create,changeorremovepolicyprofilesbasedonbusiness‐specificuseofnetworkservices.
•Permitordenyaccesstospecificservicesbycreatingandassigningclassificationruleswhich
mapuserprofilestoprotocol‐basedframefiltering
policiesconfiguredforaparticularVLAN
orClassofService(CoS).
• Assignorunassignportstopolicyprofilessothatonlyportsactivatedforaprofilewillbe
allowedtotransmitframesaccordingly.
Configuring Policy Profiles
Purpose
Toreview,create,changeandremoveuserprofilesthatrelatetobusiness‐drivenpoliciesfor
managingnetworkresources.
Note: A license is required to enable Policy on the SecureStack B2 and B3. Refer to “Activating
Licensed Features” on page 3-26 for more information.
For information about... Refer to page...
Policy Classification Configuration Summary 10-1
Configuring Policy Profiles 10-1
Configuring Classification Rules 10-5
Assigning Ports to Policy Profiles 10-14
Configuring Policy Class of Service (CoS) 10-16
Note: It is recommended that you use Enterasys Networks NetSight Policy Manager as an
alternative to CLI for configuring policy classification on the SecureStack B3 devices.