User guide

Help Messages

Extreme Networks Policy Manager (EPM) 1.2 User Guide

Type Selection Panel

This panel allows the user to select the rule type. You may choose to create an ACL rule or CLEAR-Flow rule. Some policy

versions do not support CLEAR-Flow rules, so you will NOT see a selection choice for versions the do not support CLEAR-

Flow. You must select or enter a class name for the new rule. Rules are organized by class to make grouping of rules easier.

Give your rule a name that you can use to group all related rules. For example, you can create a set of ACL rules that

increment counters for ICMP echo request and unreachable packets, then create CLEAR-Flow rules to monitor the delta ratios

for these counters. This collection of rules could be grouped under a class name of 'IcmpThreatRules' for instance.

ttl-eq-zero-during reassembly ICMP Codes 1 number-icmpcode

ttl-eq-zero-during-transit ICMP Codes 0 number-icmpcode

communication-prohibited-by-filtering ICMP Codes 13 number-icmpcode

destination-host-prohibited ICMP Codes 10 number-icmpcode

destination-host-unknown ICMP Codes 7 number-icmpcode

destination-network-prohibited ICMP Codes 9 number-icmpcode

destination-network-unknown ICMP Codes 6 number-icmpcode

fragmentation-needed ICMP Codes 4 number-icmpcode

host-precedence-violation ICMP Codes 14 number-icmpcode

host-unreachable-for-TOS ICMP Codes 12 number-icmpcode

network-unreachable ICMP Codes 0 number-icmpcode

network-unreachable-for-TOS ICMP Codes 11 number-icmpcode

port-unreachable ICMP Codes 3 number-icmpcode

precedence-cutoff-in-effect ICMP Codes 15 number-icmpcode

protocol-unreachable ICMP Codes 2 number-icmpcode

source-host-isolated ICMP Codes 8 number-icmpcode

source-route-failed ICMP Codes 5 number-icmpcode

minimize-delay IPTOS 16 number-iptos

maximize-reliability IPTOS 4 number-iptos

minimize-cost IPTOS 2 number-iptos

normal-service IPTOS 0 number-iptos

af11 DSCP 10 number_dscp

af12 DSCP 12 number_dscp

af13 DSCP 14 number_dscp

af21 DSCP 18 number_dscp

af22 DSCP 20 number_dscp

af23 DSCP 22 number_dscp

af31 DSCP 26 number_dscp

af32 DSCP 28 number_dscp

af33 DSCP 30 number_dscp

af41 DSCP 34 number_dscp

af42 DSCP 36 number_dscp

af43 DSCP 38 number_dscp

ef DSCP 46 number_dscp