Citrix Systems Network Router 9.2 ユーザーズマニュアル
Chapter 2 Configuring Advanced Policies
21
•
NEXT. This keyword selects the policy with the next higher priority level
in the current policy bank.
in the current policy bank.
•
An integer. If you supply an integer, it must match the priority level of
another policy in the current policy bank.
another policy in the current policy bank.
•
END. This keyword stops evaluation after processing the current policy,
and no additional policies in this bank are processed.
and no additional policies in this bank are processed.
•
Blank. If the Goto expression is empty, it is the same as specifying END.
•
A numeric expression. This is an advanced expression that resolves to a
priority number for another policy in the current bank.
priority number for another policy in the current bank.
•
USE_INVOCATION_RESULT. This phrase can be used only if you are
invoking an external policy bank. Entering this phrase causes the NetScaler
to perform one of the following actions:
invoking an external policy bank. Entering this phrase causes the NetScaler
to perform one of the following actions:
•
If the final Goto in the invoked policy bank has a value of END or is
empty, the invocation result is END, and evaluation stops.
empty, the invocation result is END, and evaluation stops.
•
If the final Goto expression in the invoked policy bank is anything
other than END, the NetScaler performs a NEXT.
other than END, the NetScaler performs a NEXT.
The following table illustrates a policy bank that uses Goto statements and policy
bank invocations.
bank invocations.
How Policy Evaluation Ends
Evaluation of a policy bank ends when the following takes place:
Example of a Policy Bank That Uses Gotos and External Bank Invocations
Policy Name
Priority Goto Invocation
Policy
Bank
to be Invoked
ClientCertificatePolicy
(rule: does the request
contain a client certificate?)
(rule: does the request
contain a client certificate?)
100
300
None
None
SubnetPolicy (rule: is the
client from a private
subnet?)
client from a private
subnet?)
200
NEXT
None
None
NOPOLICY
300
USE
INVOCATION
RESULT
INVOCATION
RESULT
Request
vserver
vserver
My_Request
_VServer
_VServer
NOPOLICY
350
USE
INVOCATION
RESULT
INVOCATION
RESULT
Policy Label
My_Policy_
Label
Label
WorkingHoursPolicy (rule:
is it working hours?)
is it working hours?)
400
END
None
None