Configuring QoS Using Condition Groups in Policies
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 26-53
Using Condition Groups in Policies
Condition groups are made up of multiple IPv4 addresses, MAC addresses, services, ports, or VLANs to
which you want to apply the same action or policy rule. Instead of creating a separate condition for each
address, etc., create a condition group and associate the group with a condition. Groups are especially
useful when configuring filters, or Access Control Lists (ACLs); they reduce the number of conditions and
rules that must be entered. For information about setting up ACLs, see Chapter 26, “Configuring QoS.”
Commands used for configuring condition groups include the following:
policy network group
policy service group
policy mac group
policy port group
Access Control Lists (ACLs) typically use condition groups in policy conditions to reduce the number of
rules required to filter particular types of traffic. For more information about ACLs, see “Using Access
Control Lists” on page 26-63.
Sample Group Configuration
1 Create the group and group entries. In this example, a network group is created:
-> policy network group netgroup1 10.10.5.1 10.10.5.2
2 Attach the group to a policy condition. For more information about configuring conditions, see
“Creating Policy Conditions” on page 26-44.
-> policy condition cond3 source network group netgroup1
3 Attach the condition to a policy rule. (For more information about configuring rules, see “Creating
Policy Rules” on page 26-46.) In this example, action act4 has already been configured. For example:
-> policy rule my_rule condition cond3 action act4
4 Apply the configuration. See “Applying the Configuration” on page 26-71 for more information about
this command.
-> qos apply
Note. (Optional) Use the show policy network group command to display information about the network
group. Each type of condition group has a corresponding show command. For example:
-> show policy network group
Group Name: From Entries
Switch blt 4.0.1.166
10.0.1.166
+netgroup1 cli 10.10.5.1/255.255.255.0
10.10.5.2/255/255/255.0
See the OmniSwitch AOS Release 8 CLI Reference Guide for more information about the output of this
display. See “Verifying Condition Group Configuration” on page 26-59 for more information about using
show commands to display information about condition groups.
To Next Page
Loading...
Need help?
General
