Clear Policy Rule - Enterasys SecureStack C2 Configuration Manual

clear policy rule

Table 9-3 Valid Values for Policy Classification Rules (Continued)
Classification Rule Parameter
Destination or Source UDP port:
udpsourceport
udpdestport
vlantag
Examples
This example shows how to use Table
II Type 1526 frames to VLAN 7:
C2(su)->set policy rule 3 ether 1526 vlan 7
This example shows how to use Table
frames from source port 45:
C2(su)->set policy rule 5 udpportsource 45 forward
This example shows how to use Table
source traffic from IP address 1.2.3.4. If mask 32 is not specified as shown, a default mask of 48 bits
(IP address + port) would be applied:
C2(su)->set policy rule 1 ipsourcesocket 1.2.3.4 mask 32 drop
clear policy rule
Use this command to delete policy classification rule entries.
Syntax
This command has two forms of syntax—one to clear an admin rule (for policy ID 0), and the
other to clear a classification rule.
clear policy rule admin-profile {vlantag data [mask mask]
clear policy rule profile-index {all-pid-entries | {ether | icmptype | ipproto|
ipdestsocket| ipsourcesocket | iptos | macdest | macsource | tcpdestport |
tcpsourceport | udpdestport | udpsourceport}}
Parameters
The following parameters apply to deleting an admin rule.
admin‐profile
vlantag data
mask mask
The following parameters apply to deleting a classification rule.
9-12 Policy Classification Configuration
data value
UDP Port Number:
0 - 65535 or 0 - 0xFFFF
VLAN tag: 1- 4094
9‐3 to assign a rule to policy profile 3 that will filter Ethernet
9‐3 to assign a rule to policy profile 5 that will forward UDP
9‐3 to assign a rule to policy profile 1 that will drop IP
Specifies that the rule to be deleted is an admin rule for policy ID 0.
Deletes the rule based on VLAN tag specified by data. Value of data can
range from 1 to 4094 or 0xFFF.
(Optional) Specifies the number of significant bits to match, dependent
on the data value entered. Value of mask can range from 1 to 12.
Refer to Table 9‐3 for valid values for each classification type and data
value.
mask bits
1 - 16
1 -12