Specifications

Policy Overview
May 18, 2009 Page 10 of 32
storagedoespersistafteraresetofthedevice.Usethestorage‐typeoptiontospecifythedesired
storagetypeforthispolicyruleentryinanenhancedpolicycontext.
Forward and Drop
Packetsforthisentrycanbeeitherforwardedordropped forthistrafficclassificationusingthe
forwardanddroppolicyruleoptions.
Allowed Traffic Rule-Type on a Port
Enhanced Policy
Allowedtrafficrule‐typeonaportisanenhancedpolicythatprovidesforthesetting,foreach
port,ofthetrafficclassificationrule‐typesthatwillbeallowedorignoredinanadmin‐profile.By
default,alltrafficrule‐typesareallowed.
Usethesetpolicyallowed‐typecommandto
configureasubsetoftrafficrule‐typesthatwillbe
allowedonthespecifiedports.Allunspecifiedtraffic rule‐typeswillbesettoignore.Theappend
optionprovidesfortheadditionofspecifiedrule‐typesforthecurrentsubsetofallowed
rule‐types.Theclearoptionprovidesforthe
subtractionofspecifiedrule‐typesfromthecurrent
subsetofallowedrule‐types.
Usetheshowpolicyallowed‐typecommandtodisplayatableofthecurrentallowedandignored
trafficrule‐typesforthespecifiedport(s).
SeeTable 1onpage 8foralistingofsupportedallowedtrafficclassificationrule‐types.Use
the
attributeIDvalue,specifiedinTable 1,intherulelistforthesetpolicyallowed‐typecommandto
identifythetrafficclassificationtobeaddedtoordeletedfromtheallowed‐typelistforthe
specifiedports.
Policy Accounting
Enhanced Policy
Policyaccountingisanenhancedpolicycapabilitythatcontrolsthecollectionofclassificationrule
hits.Ifahitoccursonapolicyrule,policyaccountingflagsthatthehithasoccurredandwill
remainflaggeduntilcleared.Policyaccountingisenabledbydefault.Policyaccountingcanbe
enabledordisabledusing
thesetpolicyaccountingcommand.
Policy Syslog Rule Usage
Enhanced Policy
Policysyslogruleusageisanenhancedpolicycapabilitythatprovidesforthesettingofruleusage
messageformattingtomachine‐orhuman‐readableandsetsthecontrolforextendedsyslog
messageformat.
Enablingthemachine‐readableoptionformatstheruleusagemessagesinarawdataformat that
canthen
beparsedbyauser‐writtenscriptingbackend.Thisprovidestheenterprisewiththe
abilitytoformatthedatainamannerthatismostusefultotheenterprise.Disablingthe
machine‐readableoptionformatsthesameruleusagedatainahumanreadableformat.
Settingsyslogruleusagetoextended
‐formatincludesadditionalinformationintheruleusage
syslogmessage.Thedataincludedintheextendedformatisasfollows:VLANand COSassigned,
andthefollowingfieldsfoundinthepacket:DESTMAC,SRCMAC,TAG(8100:tci),EtherType,