Creating Network Groups - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

3
Attach the condition to a policy rule. (For more information about configuring rules, see
Policy Rules" on page
-> policy rule my_rule condition cond3 action act4
4
Apply the configuration. See
this command.
-> qos apply
The next sections describe how to create groups in more detail.

Creating Network Groups

Use network policy groups for policies based on IPv4 source or destination addresses. Note that IPv6
addresses are not supported with network groups at this time. The policy condition specifies whether the
network group is a source network group, destination network group, or multicast network group.
•
Default switch group—Note that by default the switch contains a network group called switch that
includes all IPv4 addresses configured for the switch itself. This network group can also be used in
policy conditions.
•
ACLs—Typically network groups are used for Access Control Lists. For more information about
ACLs, see "Using Access Control Lists" on page
To create a network policy group, use the
group and the IPv4 address(es) to be included in the group. Each IPv4 address must be separated by a
space. A mask can also be specified for an address. If a mask is not specified, the address is assumed to be
a host address.
Note. Network group configuration is not active until the qos apply command is entered.
In this example, a policy network group called netgroup2 is created with two IPv4 addresses. No mask is
specified, so the IPv4 addresses are assumed to be host addresses.
-> policy network group netgroup2 10.10.5.1 10.10.5.2
In the next example, a policy network group called netgroup3 is created with two IPv4 addresses. The
first address also specifies a mask.
-> policy network group netgroup3 173.21.4.39 mask 255.255.255.0 10.10.5.3
In this example, the 173.201.4.39 address is subnetted, so that any address in the subnet is included in the
network group. For the second address, 10.10.5.3, a mask is not specified; the address is assumed to be a
host address.
The network group can then be associated with a condition through the policy condition command. The
network group must be specified as a source network group or destination network group. In this
example, netgroup3 is configured for condition c4 as source network group:
-> policy condition c4 source network group netgroup3
OmniSwitch AOS Release 7 Network Configuration Guide
21-43.) In this example, action act4 has already been configured. For example:
"Applying the Configuration" on page 21-66
policy network group
21-59.
command. Specify the name of the
March 2011
"Creating
for more information about
page 21-49