EasyManua.ls Logo

Enterasys SecureStack C2 C2G170-24 - Set Policy Rule

Enterasys SecureStack C2 C2G170-24
698 pages
Print Icon
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
set policy rule
11-10 Policy Classification Configuration
|Ether II packet type | | | X | X | X | X | | | |
|LLC DSAP/SSAP/CTRL | | | | | | | | | |
|VLAN tag | | | | | | | | | |
|Replace tci | | | | | | | | | |
|Port string | X | X | X | X | X | X | | | |
=============================================================
set policy rule
UsethiscommandtoassignincominguntaggedframestoaspecificpolicyprofileandtoVLANor
Class‐of‐Serviceclassificationrules.
Syntax
Thiscommandhastwoformsofsyntax—onetocreateanadminrule,andtheothertocreatea
trafficclassificationruleandattachittoapolicyprofile.
set policy rule admin-profile {vlantag data [mask mask] admin-pid profile-index}
[port-string port-string]
set policy rule profile-index {ether | icmptype | ipproto | ipdestsocket |
ipsourcesocket | iptos | macdest | macsource | tcpdestport | tcpsourceport |
udpdestport | udpsourceport} data [mask mask] {[vlan vlan] [cos cos] | [drop |
forward]}
Parameters
Thefollowingparametersapplytocreatinganadminrule.SeetheUsagesectionbelowformore
informationaboutadminrules.
Thefollowingparametersapplytocreatingatrafficclassificationrule.
Note: Classification rules are automatically enabled when created.
admin‐profile Specifiesthatthisisanadminrule.
vlantagdata ClassifiesbasedonVLANtagspecifiedbydata.Valueofdatacanrange
from1to4094or0xFFF.
maskmask (Optional)Specifiesthenumberofsignificantbitstomatch,dependent
onthedatavalueentered.Valueofmaskcanrangefrom
1to12.
RefertoTable 11‐3forvalidvaluesforeachclassificationtypeanddata
value.
admin‐pid
profile‐index
Associatesthisadminrulewithapolicyprofile,identifiedbyitsindex
number.Policyprofilesareconfiguredwiththesetpolicyprofile
commandasdescribedin“setpolicyprofile
”onpage 11‐3.
Validprofile‐indexvaluesare1‐255.
port‐stringport‐string (Optional)Assignsthisrulewiththespecifiedpolicyprofileonspecific
ingressport(s).Rulewouldnotbeuseduntilpolicyisassignedtothe
specifiedport(s)usingthesetpolicyportcommandasdescribedin“set
policyport”onpage 11‐15.

Table of Contents