Creating Policy Conditions - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

Creating Policy Conditions

This section describes how to create policy conditions in general. Creating policy conditions for particular
types of network situations is described later in this chapter.
Note. Policy condition configuration is not active until the qos apply command is entered. See
the Configuration" on page
To create or modify a policy condition, use the policy condition command with the keyword for the type
of traffic you want to classify, for example, an IP address or group of IP addresses. In this example, a
condition (c3) is created for classifying traffic from source IP address 10.10.2.1:
-> policy condition c3 source ip 10.10.2.1
There are many options for configuring a condition, depending on how you want the switch to classify
traffic for this policy. An overview of the options is given here. Later sections of this chapter describe how
to use the options in particular network situations.
Note. The group options in this command refer to groups of addresses, services, or ports that you config-
ure separately through policy group commands. Rather than create a separate condition for each address,
service, or port, use groups and attach the group to a single condition. See
Policies" on page 21-48
More than one condition parameter can be specified. Some condition parameters are mutually exclusive.
For supported combinations of condition parameters, see
policy condition keywords
source ip
source ipv6
destination ip
destination ipv6
source network group
destination network group
source ip port
destination ip port
source tcp port
destination tcp port
source udp port
destination udp port
established
tcpflags
The condition is not activated on the switch until you enter the qos apply command.
OmniSwitch AOS Release 7 Network Configuration Guide
21-66.
for more information about setting up groups.
service
service group
ip protocol
icmptype
icmpcode
802.1p
inner 802.1p
tos
dscp
source mac
destination mac
source mac group
destination mac group
source vlan
source vlan group
inner source vlan
inner source vlan group
destination vlan (multicast only)
ethertype
"Using Condition Groups in
"Policy Conditions" on page
source port
source port group
destination port
destination port group
ipv6
nh
flow-label
March 2011
"Applying
21-27.
page 21-41