Configuring UNP Port-Based Access Control Configuring Universal Network Profiles
page 27-32 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
To configure a default UNP for a UNP bridge port or access port, use the unp default-vlan-profile
command or the unp default-spb-profile command.With both commands, specify the name of an exist-
ing profile. For example, the following command assigns a default profile to bridge port 1/10 and access
port 1/12:
-> unp port 1/10 default-vlan-profile port10_unp
-> unp port 1/12 default-spb-profile service1_def_unp
The default UNP for a port is basically a “last resort” UNP for traffic that was not successfully classified
through other methods. If all other methods fail and a default UNP is not configured for the port, device
traffic is blocked on that port.
Assigning a Customer Domain ID
This implementation of UNP supports assigning UNP ports to a customer domain. A customer domain is
identified by a numerical ID value. When a port is assigned to a domain ID, only classification rules
assigned to the same domain ID are applied to traffic on these ports.
By default, all UNP ports and link aggregates are assigned to domain 0. Assigning one or more ports to a
different domain ID creates a logical group of ports to which specific classification rules are applied.
To assign a port or link aggregate to a customer domain, use the unp unp-customer-domain command
and specify an existing domain ID number. For example:
-> unp port 1/12 unp-customer-domain 1
-> unp linkagg 5 unp-customer-domain 2
To create a new customer domain ID, use the unp customer-domain command. For example:
-> unp customer-domain 10
Use the show unp customer-domain command to display a list of existing customer domain IDs.
To Next Page
Loading...
Need help?
General