An egress policy (or listener policy)
defines the actions to apply to outbound packets.
Before you begin
- Create a policy rule match to
associate with the policy. For more information, see Change a Policy Rule Match for a Device.
- An ACL bound to an egress policy
can be modified.
- An egress policy bound to an
egress can be modified.
About this task
Take the following steps to define the criteria for a policy. Each set of criteria is
a rule. A policy can contain multiple rules.
Note
This procedure applies only to
Extreme 9920 devices.
Listener policy byte count is incorrect when truncation is
enabled. The byte count for truncated packets is the actual byte count seen by
the egress ACL before truncation.
Procedure
-
In the Navigation menu, select
Device
Inventory.
-
In the Devices page, click anywhere in the
required device row except the Actions column ()
to proceed to the device Overview page.
-
In the Device Config menu,
select .
-
In the Name field, enter
a unique name for the policy.
An egress policy cannot have
the same name as another egress policy or the reserved keyword all.
-
In the Policy Type
field, select Egress
Policy.
-
Select the Sequence in which
to apply the rule.
-
In the Matches field,
select a policy rule match.
- If you did not create a
policy rule match, select Create
Match to create the match now.
- For a policy, you can
select three rule matches of different types: 1 v4, 1 v6, and 1 l2.
- You cannot use the same
policy rule match multiple times in a policy.
-
In the Packet Slicing
field, enter a value to represent the maximum packet size after slicing.
The final packet size will be
less than or equal to this value.
-
In the Header Stripping
field, select one or more tags to strip: 802.1BR, VLAN, or VN (Virtual
NIC).
The 802.1BR and VN tags cannot
coexist in the same policy rule action.
-
In the VLAN field,
select the VLAN ID to change the VLAN tag in the egress packet.
-
To remove the outermost tunnel
headers from the packet, select the Decap check
box.
-
To prevent the rule from being
used in the policy, select the Deny check box.
Tip
This option
prevents the rule from being used, but does not delete the configuration of
the rule. The rule is skipped and is not used to drop a packet. You can
reinstate the rule later without having to reconfigure it.
-
Select Add Rule.
The rule parameters
appear in the pane on the right.
-
Repeat step 7 through step 13
until you have added all the rules you need.
-
Select Create.