Enterasys Enterasys SecureStack B2 B2G124-24 Especificações Página 352

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
  • Página
    / 600
  • Índice
  • MARCADORES
  • Avaliado. / 5. Com base em avaliações de clientes
Vista de página 351
set policy rule
12-12 Policy Classification Configuration
Usage
Anadminrulecanbeusedtomapincomingtaggedframestoapolicyrole(profile).Therecanbe
onlyoneadminruleconfiguredpersystem(stack).Typically ,thisruleisusedtoimplementthe
“User+IPphone”feature.RefertoConfiguringMultiUserAuthentication(User+IPphone)
on
page 1933formoreinformation.Youwouldconfigureapolicyprofile/roleforIPphones(for
example,assigningthetraffictoa“voice”VLAN),thenassociatethatpolicyprofilewiththe
adminrule,andassociatetheadminrulewiththedesired ports.Usersauthenticatingoverthe
sameportwilltypically
useadynamicallyassignedpolicyrole.
Apolicyclassificationrulehastwomainparts:TrafficDescriptionandActions.TheTraffic
Descriptionidentifiesthetypeoftraffictowhichtherulewillpertain.Actionsspecifywhether
thattrafficwillbeassignedclassofservice,assignedtoaVLAN,orboth.
Table 1231provides
thesetpolicyruledatavaluesthatcanbeenteredforaparticularparameter,
andthemaskbitsthatcanbeenteredforeachclassifierassociatedwiththatparameter.
Examples
ThisexampleshowshowtouseTable 1231toassignaruletopolicyprofile3thatwillfilter
EthernetIIType1526framestoVLAN7:
B2(su)->set policy rule 3 ether 1526 vlan 7
ThisexampleshowshowtouseTable 1231toassignaruletopolicyprofile5thatwillforward
UDPpacketsfromsourceport45:
B2(su)->set policy rule 5 udpportsource 45 forward
Table 12-31 Valid Values for Policy Classification Rules
Classification Rule Parameter data value mask bits
ether Type field in Ethernet II packet:
1536 - 65535 or 0x600 - 0xFFFF
Not applicable.
icmptype ICMP Type: a.b Not applicable.
ipproto Protocol field in IP packet:
0 - 255 or 0 - 0xFF
Not applicable.
Destination or Source IP Address:
ipdestsocket
ipsourcesocket
IP Address in dotted decimal
format: 000.000.000.000 and
(Optional) post-fixed port: 0 -
65535
1 - 48
iptos Type of Service field in IP packet:
0 - 252 or 0 - 0xFC
Not applicable.
Destination or Source MAC:
macdest
macsource
MAC Address: 00-00-00-00-00-
00
1 - 48
Destination or Source TCP port:
tcpdestport
tcpsourceport
TCP Port Number:
0 - 65535 or 0 - 0xFFFF
1 - 16
Destination or Source UDP port:
udpsourceport
udpdestport
UDP Port Number:
0 - 65535 or 0 - 0xFFFF
1 - 16
vlantag VLAN tag: 1- 4094 Not applicable.
Vista de página 351
1 2 ... 347 348 349 350 351 352 353 354 355 356 357 ... 599 600

Comentários a estes Manuais

Sem comentários