Valid Policies - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

•
LDAP Policy Management—Policies can also be configured through the PolicyView application and
stored on an attached LDAP server. LDAP policies can only be modified through PolicyView. For
information about setting up a policy server and managing LDAP policies, see
Policy Servers."
•
VLAN Stacking Ethernet Service—VLAN Stacking ports are always trusted and default
classification is set to 802.1p. QoS policy conditions to match the inner VLAN tag and inner 802.1p
tag are available for classifying customer information contained in VLAN Stacking frames. For infor-
mation about VLAN Stacking see

Valid Policies

The switch does not allow you to create invalid condition/action combinations; if you enter an invalid
combination, an error message is displayed. A list of valid condition and actions is given in
Conditions" on page 21-27
It is possible to configure a valid QoS rule that is active on the switch, however the switch is not able to
enforce the rule because some other switch function (for example, routing) is disabled.
Policy Conditions
The following conditions are supported and can be combined with other conditions and/or actions:
Supported Policy Conditions Table
Layer 1
destination port
destination port group
source port
source port group
Layer 4
source TCP/UDP port
destination TCP/UDP port
service, service group
TCP flags
(ECN/CWR are not supported)
The CLI prevents you from configuring invalid condition combinations that are never allowed; however, it
does allow you to create combinations that are supported in some scenarios. For example, you might
configure source ip and a destination ip for the same condition.
Consider the following guidelines when configuring policy conditions:
•
IPv4 and IPv6 conditions cannot be combined.
•
Source and destination MAC address conditions cannot be used in IPv6 policy rules.
OmniSwitch AOS Release 7 Network Configuration Guide
Chapter 27, "Configuring VLAN Stacking."
and "Policy Actions" on page
Layer 2
source MAC
source MAC group
destination MAC
destination MAC group
802.1p
inner 802.1p
ethertype
source VLAN
source VLAN group
inner source VLAN
inner source VLAN group
destination VLAN (multicast rules only)
destination VLAN group (multicast rules only)
IP Multicast (IGMP)
destination only
21-28.
Layer 3
IP protocol
source IP
multicast IP
destination IP
source network group
destination network group
multicast network group
ToS, DSCP
ICMP type, ICMP code
source IPv6
destination IPv6
IPv6 traffic
IPv6 next header (NH)
IPv6 flow label (FL)
March 2011
Chapter 22, "Managing
"Policy
page 21-27