HP 3500 Series Advanced Traffic Management Manual page 440

Classifier-Based Software Configuration
Zone Classes
8-44
2. To configure the actions that you want to execute on ports associated with
a zone, enter one or more class commands from the policy configuration
context.
Context: Policy configuration
Syntax: [no] [seq-number] class zone < source zone name >
< destination zone name > action intercept unidirectional
Defines the source and destination zones for packets that
must be intercepted and forwarded to the ONE
application.
<source zone name>: Defines the source zone for packets
that must be intercepted and forwarded to the ONE
application.
<destination zone name>: Defines the destination zone for
packets that must be intercepted and forwarded to the
ONE application.
The (optional) seq-number parameter sequentially orders
the class-action statements in a policy configuration.
Actions are executed on matching packets in numerical
order.
Default: Class-action statements are numbered in
increments of 10, starting at 10.
action intercept unidirectional: Defines the action as
intercept and the flow of traffic as unidirectional (one-
way).
The configured actions are executed on packets that arrive on the ports
associated with the source zone and are destined for ports associated with
the destination zone.
You cannot configure intercept rules for the BYPASS zone class. As such,
traffic to and from the BYPASS zone cannot be intercepted.
Enter the exit command to exit the policy configuration context.
3.
To display a policy configuration, enter the show policy <policy-name>
4.
command.
To edit a policy configuration, re-enter the policy context (policy com-
mand) and modify class-action statements as described in "Modifying
Zones and Policies" on page 8-45.
Example. In the following policy configuration, traffic being sent from the
internal zone to the external zone is intercepted, so that it can be forwarded
to an application that is running on an HP AllianceONE Extended Services zl
Module.