Condition Combinations - Alcatel-Lucent OmniSwitch 6800 Series Network Configuration Manual

Condition Combinations

Condition Combinations
The CLI prevents you from configuring invalid condition combinations that are never allowed; however, it
does allow you to create combinations that are supported in some scenarios. For example, you might
configure source ip and a destination ip for the same condition.
The following conditions are supported and may be combined with other conditions and/or actions:
•
Layer 1—source port, source port group, destination port, destination port group.
•
Layer 2—source MAC, source MAC group, destination MAC, destination MAC group, 802.1p, inner
802.1p, ethertype, source VLAN, inner source VLAN, destination VLAN (multicast policies only).
•
Layer 3—IP protocol, source IP, source IPv6, multicast IP, destination IP, destination IPv6, source
network group, destination network group, multicast network group, IPv6 traffic, IPv6 next header
(NH), IPv6 flow label (FL), ToS, DSCP, ICMP type, ICMP code.
•
Layer 4—source TCP/UDP port, destination TCP/UDP port, service, service group, TCP flags (ECN
and CWR are only supported on the OmniSwitch 6800).
•
IP Multicast—An IP multicast condition is used in IGMP ACLs. The multicast IP is the multicast
group address used in the IGMP report packet.
Note the following:
•
The 802.1p and source VLAN conditions are the only Layer 2 conditions allowed in combination with
Layer 4 conditions.
•
Source and destination parameters can be combined in Layer 2, Layer 3, and Layer 4 conditions.
•
In a given rule, ToS or DSCP may be specified for a condition with priority specified for the action.
•
The Layer 1 destination port condition only applies to bridged traffic, not routed traffic. This restric-
tion does not apply to the OmniSwitch 6800.
•
The IP multicast condition works in combination with Layer 1, Layer 2, and Layer 3 destination condi-
tions only if these conditions specify the device that sends the IGMP report packet.
•
All IPv6 conditions are not supported on OmniSwitch 6800. For more information about IPv6 policies,
see Chapter 31, "Configuring
•
Individual items and their corresponding groups cannot be combined in the same condition. For exam-
ple, a source IP address cannot be included in a condition with a source IP network group.
•
Layer 2 and Layer 3 rules are always effected on bridged and routed traffic. As a result, combining
source or destination TCP/UDP port and IP protocol in a condition is allowed.
•
The Quarantine Manager and Remediation (QMR) application and inner VLAN or inner 802.1p condi-
tions are mutually exclusive. If one of these is active, the other one is not available.
•
Use the following policy condition combinations table as a guide when configuring policy conditions.
For more information about combining policy actions or policy actions with conditions, see
Combinations" on page 30-8
page 30-6
ACLs".
and "Condition and Action Combinations" on page
OmniSwitch 6800/6850/9000 Network Configuration Guide
Configuring QoS
"Action
30-9.
March 2008