Extreme Networks ExtremeCloud Appliance Series

To Next Page

To Previous Page

and the policy, it is necessary to open each device group and associate the conﬁgured network and the

deﬁned roles by editing the assigned conﬁguration Proﬁle.

ExtremeCloud Appliance simpliﬁes this procedure. After saving a network conﬁguration or policy

deﬁnition, ExtremeCloud Appliance prompts you to select the conﬁguration Proﬁle for association.

Note

The association that you deﬁne applies to all device groups that use the selected

conﬁguration Proﬁle.

If necessary, you can modify a conﬁguration Proﬁle from the device group. The Associated Proﬁles

dialog simply makes the proﬁle association process easier.

Related Links

Proﬁles on page 13

Policy Rules for OSI L2 to L4

You can deﬁne policy rules for a role to specify network access settings for a speciﬁc user role. Network

policies are a set of rules, deﬁned in a speciﬁc order, that determine how connections are authorized or

denied. If you do not deﬁne policy rules for a role, the role's default action is applied to all trac subject

to that role. However, if you require user-speciﬁc ﬁlter deﬁnitions, then the ﬁlter ID conﬁguration

identiﬁes the speciﬁc role that is applied to the user.

A role can have no rules if the default action is sucient. Rules are used only to provide dierent

treatments for dierent packet types to which a single role is applied.

Specify the OSI layer to which the rule pertains. The rule deﬁnes one or more actions to take on a

packet matching criteria speciﬁed by the rule. The criteria could be the MAC address (L2) or the IP

address or port number (L3 and L4).

The default action for all rules is Contain to VLAN, indicating that the rule applies to all trac

associated with the VLAN deﬁned at the Role. This can be the Network default VLAN or a unique VLAN

ID speciﬁed at the Role. The ability to specify the VLAN ID at the Role makes conﬁguring network policy

easier.

If the trac is allowed, it can also be assigned a Class of Service (CoS) that can aect the priority and

latency of that trac. Only the rules in the policy assigned to a client are applied to a client's trac.

Note

Rules in the Application Layer (L7) apply to application access and use dierent matching

criteria.

Extreme Networks ExtremeCloud Appliance Series - Page 130