Pseries Installation Guide

28 Graphical User Interface

Table 5 describes the four possible combinations of capture/forward policies.

Editing Dynamic Rules with the GUI

Dynamic rules are stored in the file rules.custom in the /usr/local/pnic/0 directory. The GUI provides a

quick way to access and modify these rules by invoking the vi editor on this file.

Table 4 Managing Rules Using the GUI

Option Description

Edit Rules This option invokes the vi editor on the file rules.custom in the /user/local/pnic/0

directory (see “Editing Dynamic Rules with the GUI” on page 28).

• You can add, delete, or modify dynamic rules for either of the processing

channels (see Appendix D , on page 125 for information on vi).

• The rules are automatically compiled and loaded into the appliance; you are

prompted to confirm these actions.

Manage Rules This option instructs the DPI on handling matching packets.

• It displays a list of all the rules contained in the FPGA and the policy setting for

each.

• There are four policies available, and they are described in Table 5.

• Rules configured to ignore a packet—that is, the policy setting is permit or

deny—take precedence over rules that have a policy setting of alert or divert.

Therefore, a permit or deny rule disables the capturing for all other rules that

match the same packet.

• To modify policy settings, see “Managing Capture/Forward Policies with the

GUI” on page 29.

Note: The Capture toggle is not used. Capture/forward settings can only be

modified through the graphical user interface.

Manage Firmware It displays the firmware files in /usr/local/pnic/firmware and allows you to select

one to be uploaded to the FPGA. Selecting firmware restarts and reloads the

FPGA.

To manage firmware, see “Selecting Firmware with the GUI” on page 30.

Table 5 Capture/Forward Policies

Policy Capture Forward

Permit

Deny

Alert

Divert