Specifications

May 18, 2009 Page 1 of 32
Configuring Policy
ThisdocumentdescribestheEnterasys
®
policyfeatureanditsconfigurationonEnterasysMatrix
®

N‐Series,EnterasysSecureStack™,D‐Series,G‐Series,andI‐Seriesswitchdevices.
What is Policy?
PolicyisacomponentofSecureNetworksthatprovidesfortheconfigurationofrole‐based
profilesforsecuringandprovisioningnetworkresourcesbasedupontheroletheuserordevice
playswithintheenterprise.Byfirstdefiningtheuserordevicerole,networkresourcescanbe
granularlytailoredtoaspecific
user,system,service,orport‐basedcontextbyconfiguringand
assigningrulestothepolicyrole.ApolicyrolecanbeconfiguredforanycombinationofClassof
Service,VLANassignment,classificationruleprecedence,logging,accounting,ordefault
behaviorbaseduponL2,L3,andL4packetfields.Hybridauthenticationallows
eitherpolicyor
dynamicVLANassignment,orboth,tobeappliedthroughRADIUSauthorization.
Why Would I Use Policy in My Network?
ThethreeprimarybenefitsofusingEnterasysSecureNetworkspolicyinyournetworkare
provisioningandcontrolofnetworkresources,security,andcentralized operationalefficiency
usingtheEnterasysNetSight
®
PolicyMa nager.
Policyprovidesfortheprovisioningandcontrolofnetworkresourcesbycreatingpolicyrolesthat
allowyoutodeterminenetworkprovisioningandcontrolattheappropriatenetworklayer,fora
givenuserordevice.Witharoledefined,rulescanbecreatedbaseduponupto23traffic
classification
typesfortrafficdroporforwarding.AClassofService(CoS)canbeassociatedwith
eachroleforpurposesofsettingpriority,forwardingqueue,ratelimiting,andrateshaping.
Note: See the Enterasys Matrix X Router Configuration Guide for X Router policy configuration
information.
For information about... Refer to page...
What is Policy? 1
Why Would I Use Policy in My Network? 1
How Can I Implement Policy? 2
Policy Overview 2
Configuring Policy 15
Policy Configuration Example 21
Terms and Definitions 31