Table of Contents
Advertisement
Using Condition Groups in Policies
Condition groups are made up of multiple IPv4 addresses, MAC addresses, services, ports, or VLANs to
which you want to apply the same action or policy rule. Instead of creating a separate condition for each
address, etc., create a condition group and associate the group with a condition. Groups are especially
useful when configuring filters, or Access Control Lists (ACLs); they reduce the number of conditions and
rules that must be entered. For information about setting up ACLs, see
Commands used for configuring condition groups include the following:
policy network group
policy service group
policy mac group
policy port group
Access Control Lists (ACLs) typically use condition groups in policy conditions to reduce the number of
rules required to filter particular types of traffic. For more information about ACLs, see
Control Lists" on page
Sample Group Configuration
1
Create the group and group entries. In this example, a network group is created:
-> policy network group netgroup1 10.10.5.1 10.10.5.2
2
Attach the group to a policy condition. For more information about configuring conditions, see
ing Policy Conditions" on page
-> policy condition cond3 source network group netgroup1
Note. (Optional) Use the show policy network group command to display information about the network
group. Each type of condition group has a corresponding show command. For example:
-> show policy network group
Group Name:
Switch
+netgroup1
See the OmniSwitch CLI Reference Guide for more information about the output of this display. See
"Verifying Condition Group Configuration" on page 21-55
commands to display information about condition groups.
page 21-48
21-59.
21-41.
From
Entries
blt
4.0.1.166
10.0.1.166
cli
10.10.5.1/255.255.255.0
10.10.5.2/255/255/255.0
OmniSwitch AOS Release 7 Network Configuration Guide
Chapter 21, "Configuring QoS."
for more information about using show
"Using Access
"Creat-
March 2011
Advertisement
Table of Contents
