Cisco Cisco Intelligent Automation for Cloud 4.3.2 User Guide

144

Using OpenStack with the GBP Plug-in

Working with Policy Rules

Creating an Application Policy

When you create a Policy Rule, you are connecting a Policy Classifier (such as “Ping”) with one or many Policy Actions 
(such as “Allow Traffic”).

Follow the steps above under 

 and select the Create Application Policy icon.

On the Create Application Policy form, enter a policy name and a (optional) description.

Select the Policy Rules you want to use.

Click Submit Order.

Creating Policy Rules

To create a policy rule for this policy, click the Create Policy Rule icon. The Create Policy Rule popup will display.

On the Create Policy Rule popup, enter a policy rule name and a (optional) description.

Select a Policy Classifier and one or more Policy Actions.

Click Submit Order.

On the Create Application Policy form, click Submit Order.

This may take a few minutes to complete. 

Close the Create Application Policy form.

Reopen the Create Application Policy form to view the Policy Rules you added.

Deleting a Policy Rule

 The policy rule you want to delete must not be in use by any application policy. If it is, you will receive an error 

message and you will not be able to delete that policy rule.

Existing policies are listed at the bottom of the Create Application Policy form. To delete an existing policy rule:

On the Create Application Policy form, click the Delete Policy Rule icon. 

On the Delete Policy Rule popup, select the rule you want to delete.

Confirm the deletion.

Click Submit Order.

Managing Policy Target Groups

Follow the steps above under 

 and select the Manage Policy Target Groups 

icon.

On the Manage Policy Target Groups form, select a Policy Target Group Name from the Group Name drop down.

Change the Friendly Name and the (optional) description, if desired.

For the Application Policy Name, select any number and any combination of policies from both:

the Provided Application Policy list (for outgoing/sent traffic from the group), and

the Consumed Application Policy list (for incoming/received traffic to the group)

Click Submit Order.