Configuring QoS Using Condition Groups in Policies
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 26-54
Creating Network Groups
Use network policy groups for policies based on IPv4 source or destination addresses. Note that IPv6
addresses are not supported with network groups at this time. The policy condition specifies whether the
network group is a source network group, destination network group, or multicast network group.
• Default switch group—Note that by default the switch contains a network group called switch that
includes all IPv4 addresses configured for the switch itself. This network group can also be used in
policy conditions.
• ACLs—Typically network groups are used for Access Control Lists. For more information about
ACLs, see “Using Access Control Lists” on page 26-63.
To create a network policy group, use the policy network group command. Specify the name of the
group and the IPv4 address(es) to be included in the group. Each IPv4 address must be separated by a
space. A mask can also be specified for an address. If a mask is not specified, the address is assumed to be
a host address.
In this example, a policy network group called netgroup2 is created with two IPv4 addresses. No mask is
specified, so the IPv4 addresses are assumed to be host addresses.
-> policy network group netgroup2 10.10.5.1 10.10.5.2
In the next example, a policy network group called netgroup3 is created with two IPv4 addresses. The
first address also specifies a mask.
-> policy network group netgroup3 173.21.4.39 mask 255.255.255.0 10.10.5.3
In this example, the 173.201.4.39 address is subnetted, so that any address in the subnet is included in the
network group. For the second address, 10.10.5.3, a mask is not specified; the address is assumed to be a
host address.
The network group can then be associated with a condition through the policy condition command. The
network group must be specified as a source network group or destination network group. In this
example, netgroup3 is configured for condition c4 as source network group:
-> policy condition c4 source network group netgroup3
To remove addresses from a network group, use no and the relevant address(es). For example:
-> policy network group netgroup3 no 173.21.4.39
This command deletes the 173.21.4.39 address from netgroup3 after the next qos apply.
To remove a network group from the configuration, use the no form of the policy network group
command with the relevant network group name. The network group must not be associated with any
policy condition or action. For example:
-> no policy network group netgroup3
If the network group is not currently associated with any condition or action, the network group
netgroup3 is deleted from the configuration after the next qos apply.
If a condition or an action is using netgroup3, the switch displays an error message similar to the
following:
ERROR: netgroup3 is being used by condition 'c4'
Note. Network group configuration is not active until the qos apply command is entered.
To Next Page
Loading...
Need help?
General
