Configuring Profiles Configuring Universal Network Profiles
page 27-36 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
Configuring UNP Classification Rules
UNP classification rules are configurable profile attributes that are used to classify devices into a VLAN
associated with a VLAN classification profile or a SPB service associated with a service classification
profile. There are four types of UNP rules: MAC address, MAC address range, IP network address, and
VLAN tag.
When traffic received on a UNP port matches one of these rules, the traffic is classified with the UNP
associated with the matching rule. Consider the following when configuring UNP classification rules:
• If MAC authentication is enabled on a UNP port, authentication is attempted first.
• Classification rules are only applied to traffic received on UNP ports on which classification is enabled.
• Assigning a customer domain ID to a classification rule is allowed. By default, all rules are assigned to
domain 0. Rules are only applied to UNP ports that are assigned to the same customer domain.
• Specifying a VLAN profile and a SPB service profile for the same rule is allowed. This ensures that the
rule is applied to traffic coming from either a UNP bridge port or a UNP access port.
• The following order of precedence is used to determine which UNP is applied to a device when the
device matches more than one rule:
> MAC address + VLAN tag
> MAC address
> MAC address range + VLAN tag
> MAC address range
> IP address + VLAN tag
> IP address
> VLAN tag
• When a classification rule is removed or modified, all MAC addresses classified with that rule are
flushed. Adding a rule does not cause a MAC address flush. If necessary, use the no mac-learning
command to clear and re-learn any addresses after the rule is added.
To configure a UNP MAC address rule, use the unp classification mac-address command. For example,
the following command applies the “serverA” VLAN profile to a device with the specified source MAC
address:
-> unp classification mac-address 00:00:2a:33:44:01 vlan-profile serverA_unp
To configure a UNP MAC address range rule, use the unp classification mac-range command. For exam-
ple, the following command applies the “clusterA” VLAN profile to a device with a source MAC address
that falls within the specified range of MAC addresses:
-> unp classification mac-range 00:00:2a:33:44:01 00:00:2a:33:44:10 vlan-profile
clusterA
To configure a UNP IP address rule, use the unp classification ip-address command. For example, the
following command applies the “vm-1” service profile to a device with the specified source IP address:
-> unp classification ip-address 10.1.1.1 mask 255.0.0.0 vlan-profile vm-1
To configure a VLAN tag rule, use the unp classification vlan-tag command. For example, the following
command applies the”unp1” VLAN profile and the “vm-2” service profile to device packets that contain
the specified VLAN ID:
-> unp classification vlan-tag 100 vlan-profile unp1 spb-profile vm-2