Creating Services - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

To remove addresses from a network group, use no and the relevant address(es). For example:
-> policy network group netgroup3 no 173.21.4.39
This command deletes the 173.21.4.39 address from netgroup3 after the next qos apply.
To remove a network group from the configuration, use the no form of the policy network group
command with the relevant network group name. The network group must not be associated with any
policy condition or action. For example:
-> no policy network group netgroup3
If the network group is not currently associated with any condition or action, the network group
netgroup3 is deleted from the configuration after the next qos apply.
If a condition or an action is using netgroup3, the switch displays an error message similar to the
following:
ERROR: netgroup3 is being used by condition 'c4'
In this case, remove the network group from the condition first, then enter the no form of the policy
network group command. For example:
-> policy condition c4 no source network group
-> no policy network group netgroup3
The policy condition command removes the network group from the condition. (See
Conditions" on page 21-41
is deleted at the next qos apply.

Creating Services

Policy services are made up of TCP or UDP ports or port ranges. They include source or destination ports,
or both, but the ports must be the same type (TCP or UDP). Mixed port types cannot be included in the
same service.
Policy services can be associated with policy service groups, which are then associated with policy condi-
tions; or they can be directly associated with policy conditions.
To create a service, use the
for configuring a service. You can specify the protocol and the IP port; or you can use shortcut keywords.
The following table lists the keyword combinations:
Procedure
Basic procedure for either TCP or
UDP service
Shortcut for TCP service
Shortcut for UDP service
An IP protocol (TCP or UDP), source IP port and/or destination IP port (or port range) must be associated
with a service. IP port numbers are well-known port numbers defined by the IANA. For example, port
numbers for FTP are 20 and 21; Telnet is 23.
page 21-50
for more information about configuring policy conditions.) The network group
policy service command. With this command, there are two different methods
Keywords
protocol
source ip port
destination ip port
source tcp port
destination tcp port
source udp port
destination udp port
OmniSwitch AOS Release 7 Network Configuration Guide
"Creating Policy
Notes
The protocol must be specified with
at least one source or destination
port.
Keywords can be used in
combination.
Keywords can be used in
combination.
March 2011