Setting A Default Vlan For A Role; Adding Tagged, Untagged, And Forbidden Ports To The Vlan Egress Lists; Assigning A Class Of Service To A Role - Enterasys C5G124-24 Configuration Manual

Policy Configuration Overview
The following example creates a policy profile with a profile-index value of 1 and a profile name,
student, that can be used by the RADIUS Filter-ID functionality:
System(rw)->set policy profile 1 name student

Setting a Default VLAN for a Role

A default VLAN can be configured for a policy role. The policy VLAN will always be used unless
an Ether type-to-VLAN classification rule exists and is hit.
To configure a default VLAN, using the set policy profile command, enable port VLAN ID (PVID)
override with the pvid-status parameter, and specify the VLAN to be used for the role. Port VLAN
ID override is disabled by default.
The following example creates a policy profile with a profile-index value of 1, enables port VLAN
ID overwrite, and associates with it a default VLAN with an ID value of 2.
System(rw)->set policy profile 1 pvid-status enable pvid 2

Adding Tagged, Untagged, and Forbidden Ports to the VLAN Egress Lists

The VLAN egress list contains a list of ports that a frame for this VLAN can exit. Specified ports
are assigned to the VLAN egress list for this policy role as tagged, untagged, or forbidden. Ports
are added to the VLAN egress list using the egress-vlans, forbidden-vlans, and untagged-vlans
options of the set policy profile command.
The following example creates a policy profile named "Engr" with a profile index value of 1,
enables PVID override and a PVID of 400, and specifies that the port to which this profile is
applied should be added to the egress list of VLAN 400. Packets will be untagged.
System(rw)->set policy profile 1 name Engr pvid-status enable pvid 400
untagged-vlans 400

Assigning a Class of Service to a Role

How a packet is treated as it transits the network can be configured in a Class of Service (CoS). It is
through a CoS that Quality of Service (QoS) is implemented. A CoS can be configured with the
following values:
• 802.1p priority
• IP Type of Service (ToS/DSCP) rewrite value
• Inbound rate limiter (IRL)
CoS configurations are identified by a numeric value between 0 - 255. Values 0 - 7 are fixed 802.1p
CoS configurations. CoS configurations 8 - 255 are user configurable. Policy uses the cos option in
the set policy profile command, followed by the CoS configuration ID value to associate a CoS
with a policy role. A CoS can also be associated with a rule associated with the role, or profile.
16-4 Configuring Policy
Note: Enterasys supports the assignment of port VLAN-IDs 1 - 4094. VLAN-IDs 0 and 4095 can not
be assigned as port VLAN-IDs, but do have special meanings within a policy context and can be
assigned to the pvid parameter. Within a policy context:
• 0 - Specifies deny all traffic
• 4095 - Specifies permit all traffic
Note: On the Fixed Switches, only a CoS IRL associated with a policy profile will be used. A CoS
IRL associated with a policy rule will be ignored.