Enterasys SecureStack B3

set policy rule
SecureStack B3 Configuration Guide 10-11
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
Table 10‐3providesthesetpolicyruledatavaluesthatcanbeenteredforaparticularclassification
type,andthemaskbitsthatcanbeenteredforeachclassifierassociatedwiththatparameter.
ipdestsocket ClassifiesbasedondestinationIPaddresswithoptionalpost‐fixedport.
ipsourcesocket ClassifiesbasedonsourceIPaddress,with
optionalpost‐fixedport.
iptos ClassifiesbasedonTypeofServicefieldinIPpacket.
macdest ClassifiesbasedonMACdestinationaddress.
macsource ClassifiesbasedonMACsourceaddress.
tcpdestport ClassifiesbasedonTCPdestinationport.
tcpsourceport ClassifiesbasedonTCPsourceport.
udpdestport ClassifiesbasedonUDPdestinationport.
udpsourceport ClassifiesbasedonUDP
sourceport.
data Specifiesthecodeforapredefinedclassifier.Thisvalueisdependenton
theclassificationtypeentered.RefertoTable 10‐3forvalidvaluesfor
eachclassificationtype.
maskmask (Optional)Specifiesthenumberofsignificantbitstomatch,dependenton
thedatavalueentered.RefertoTable 10‐3for
validvaluesforeach
classificationtypeanddatavalue.
vlanvlan ClassifiestoaVLANID.
coscos SpecifiesthatthisrulewillclassifytoaClass‐of‐ServiceID.Validvalues
are0‐4095.Avalueof‐1indicatesthatnoCoSforwardingbehavior
modificationisdesired.(Notsupportedon
B3,C3,andG3.)
drop|forward Specifiesthatpacketswithinthisclassificationwillbedroppedor
forwarded.
Table 10-3 Valid Values for Policy Classification Rules
Classification Rule Parameter data value mask bits
ether Type field in Ethernet II packet:
1536 - 65535 or 0x600 - 0xFFFF
1- 16
ipproto Protocol field in IP packet:
0 - 255 or 0 - 0xFF
1- 8
Destination or Source IP Address:
ipdestsocket
ipsourcesocket
IP Address in dotted decimal
format: 000.000.000.000 and
(Optional) post-fixed port: 0 -
65535
1 - 48
iptos Type of Service field in IP packet:
0 - 255 or 0 - 0xFF
1- 8