Alcatel-Lucent 6850-48 Guida Di Rete

Pagina di 1162
Using Condition Groups in Policies
Configuring QoS
page 40-42
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
Using Condition Groups in Policies
Condition groups are made up of multiple IPv4 addresses, MAC addresses, services, or ports to which you 
want to apply the same action or policy rule. Instead of creating a separate condition for each address, etc., 
create a condition group and associate the group with a condition. Groups are especially useful when 
configuring filters, or Access Control Lists (ACLs); they reduce the number of conditions and rules that 
must be entered. For information about setting up ACLs, see 
Commands used for configuring condition groups include the following:
ACLs
Access Control Lists (ACLs) typically use condition groups in policy conditions to reduce the number 
of rules required to filter particular types of traffic. For more information about ACLs, see 
Sample Group Configuration
Create the group and group entries. In this example, a network group is created:
-> policy network group netgroup1 10.10.5.1 10.10.5.2
Attach the group to a policy condition. For more information about configuring conditions, see 
-> policy condition cond3 source network group netgroup1
Note. (Optional) Use the show policy network group command to display information about the network 
group. Each type of condition group has a corresponding show command. For example:
-> show policy network group
Group Name:
From 
Entries
Switch
blt
4.0.1.166
10.0.1.166
+netgroup1
cli
10.10.5.1/255.255.255.0
10.10.5.2/255/255/255.0
See the OmniSwitch CLI Reference Guide for more information about the output of this display. See 
 for more information about using show 
commands to display information about condition groups.