or >=, the hysteresis value is subtracted from the threshold; for < or <=, the hysteresis value is added to
the threshold.
For example, if the match condition had the clauses delta-
, then the condition would only be true after the ratio of the deltas of the counters
hysteresis 1
reached at least 5. At the time it became true, the hysteresis value would be subtracted from the
threshold. With the threshold now at 4, the condition would stay true until the ratio of the deltas of the
counters became less than 4.
If the statement becomes false, the threshold is reset to its original value. You would use the hysteresis
value to prevent the rule from vacillating between the true and false states if the ratio of the deltas of
the counters is near the threshold. If the hysteresis value is greater than the threshold value, the
hysteresis value will be set to zero.
The action lists will be discussed in the section,
See the section,
"Delta-Ratio Rule Type Example" on page
CLEARFlow Rule Actions
CLEARFlow rules specify an action to take when the rule is triggered and can optionally specify an
action to take when the expression is false. Because more than one action can be taken in a single rule,
the collection of actions is referred to as an action list.
The actions that can be taken are:
Permit/Deny
●
QoS Profile
●
Mirror
●
SNMP Trap
●
Syslog
●
CLI
●
Additionally, the SNMP trap, syslog, and CLI rule actions can use keyword substitution to make the
rule actions more flexible. The keyword substitutions are described at the end of the rule action
descriptions. See the section,
The following sections describe the different rule actions.
Permit/Deny
This action modifies an existing ACL rule to permit or block traffic that matches that rule.
To change an ACL to permit, use the following syntax:
permit <ACLRuleName>
To change an ACL to deny, use the following syntax:
deny <ACLRuleName>
ExtremeWare XOS 11.1 Concepts Guide
"CLEARFlow Rule Actions" on page
"Keyword Substitution" on page
Adding CLEARFlow Rules to ACLs
ratio counter1 counter2 >= 5
264, for an example.
261, for more information.
and
259.
259