Configuring Unp Classification Rules - OmniSwitch os6900 Network Configuration Manual

Configuring Profiles

Configuring UNP Classification Rules

UNP classification rules are configurable profile attributes that are used to classify devices into a VLAN
associated with a VLAN classification profile or a SPB service associated with a service classification
profile. There are four types of UNP rules: MAC address, MAC address range, IP network address, and
VLAN tag.
When traffic received on a UNP port matches one of these rules, the traffic is classified with the UNP
associated with the matching rule. Consider the following when configuring UNP classification rules:
•
If MAC authentication is enabled on a UNP port, authentication is attempted first.
•
Classification rules are only applied to traffic received on UNP ports on which classification is enabled.
•
Assigning a customer domain ID to a classification rule is allowed. By default, all rules are assigned to
domain 0. Rules are only applied to UNP ports that are assigned to the same customer domain.
•
Specifying a VLAN profile and a SPB service profile for the same rule is allowed. This ensures that the
rule is applied to traffic coming from either a UNP bridge port or a UNP access port.
•
The following order of precedence is used to determine which UNP is applied to a device when the
device matches more than one rule:
>
MAC address + VLAN tag
>
MAC address
>
MAC address range + VLAN tag
>
MAC address range
>
IP address + VLAN tag
>
IP address
>
VLAN tag
•
When a classification rule is removed or modified, all MAC addresses classified with that rule are
flushed. Adding a rule does not cause a MAC address flush. If necessary, use the no mac-learning
command to clear and re-learn any addresses after the rule is added.
To configure a UNP MAC address rule, use the
the following command applies the "serverA" VLAN profile to a device with the specified source MAC
address:
-> unp classification mac-address 00:00:2a:33:44:01 vlan-profile serverA_unp
To configure a UNP MAC address range rule, use the
ple, the following command applies the "clusterA" VLAN profile to a device with a source MAC address
that falls within the specified range of MAC addresses:
-> unp classification mac-range 00:00:2a:33:44:01 00:00:2a:33:44:10 vlan-profile
clusterA
To configure a UNP IP address rule, use the
following command applies the "vm-1" service profile to a device with the specified source IP address:
-> unp classification ip-address 10.1.1.1 mask 255.0.0.0 vlan-profile vm-1
To configure a VLAN tag rule, use the
command applies the"unp1" VLAN profile and the "vm-2" service profile to device packets that contain
the specified VLAN ID:
-> unp classification vlan-tag 100 vlan-profile unp1 spb-profile vm-2
page 27-36
unp classification mac-address
unp classification mac-range
unp classification ip-address
unp classification vlan-tag
OmniSwitch AOS Release 7 Network Configuration Guide
Configuring Universal Network Profiles
command. For example,
command. For exam-
command. For example, the
command. For example, the following
June 2013