Clearflow Rule Examples; Count Rule Type Example - Extreme Networks ExtremeWare XOS Guide Manual

CLI
This action executes a CLI command. There is no authentication or checking the validity of each
command. If a command fails, the CLI will log a message in the EMS log.
To execute a CLI command, use the following syntax:
cli <cliCommand>
where is a quoted string.
<cliCommand>
Keyword Substitution
To make the SNMP trap, syslog, and CLI actions more flexible, keyword substitutions are supported in
the syslog and SNMP trap message strings, as well as in the CLI command strings.
keywords and their substitutions.
If a keyword is not supported, or a counter name is not found, a string of
"unknownKeyword[$keyword]" will be substituted
For the $vlanName and $port keyword, the keyword
wildcard ACL Some CLI commands do not support the
commands that use this feature.
A maximum of 10 counter substitutions can be used per rule.
Table 41: Keyword Substitutions
Keyword Substitution
$policyName Replace with the policy name.
$ruleName Replace with the CLEARFlow rule name.
$<counterName> Replace with counter value for the indicated counter name.
$ruleValue Replace with the current expression value.
$ruleThreshold Replace with the expression threshold value.
$ruleInterval Replace with the rule sampling/evaluation interval.
$vlanName Replace with the interface VLAN name.
$port Replace with the interface port number.

CLEARFlow Rule Examples

In the examples that follow, there are one to two ACL rule entries followed by a CLEARFlow rule entry.
The examples illustrate the four CLEARFlow rule types: count, delta, ratio, and delta-ratio.

Count Rule Type Example

In the following example, every 10 seconds the CLEARFlow agent will request the counter1 statistics
from the hardware. After it receives the counter value, it will evaluate the CLEARFlow rule. If the value
of counter1 is greater than 1000000 packets, the CLEARFlow agent will send a trap message to the
SNMP master, and change the ACL acl_rule1 to block traffic (acl_rule1 is modified to a deny rule).
ExtremeWare XOS 11.1 Concepts Guide
will be substituted for those rules in the
all
keyword, so caution must be used with CLI
all
CLEARFlow Rule Examples
Table 41 lists the
261