configure policy resource-profile

configure policy resource-profile [default |less-acl [more-ipv4 | more-ipv4-no-ipv6 | more-ipv4-no-l2 |more-ipv4-no-mac-no-ipv6] | more-ipv4-no-mac-no-ipv6-no-l2 | more-ipv4-no-ipv6 | more-ipv4-no-mac-no-ipv6 | more-mac-no-ipv6] {profile-modifier [{no-mac no_mac} {no-ipv4 no_ipv4} {no-ipv6 no_ipv6} {no-l2 no_l2}]}

Description

Configures a profile that controls the policy rule resources available for MAC/IPv4/IPv6/L2.

Syntax Description


default	Configure a profile with the default settings.
less-acl	Configure a profile that removes some access list resources to be used for rules.
more-ipv4	Configure a profile that adds IPv4 rules.
more-ipv4-no-ipv6	Configure a profile that adds IPv4 rules at the expense of IPv6 rules.
more-ipv4-no-l2	Configure a profile that adds IPv4 rules at the expense of L2 rules. L2 ether rules are accounted for in the first available space from IPv4, IPv6, or MAC group.
more-ipv4-no-mac-no-ipv6	Configure a profile that adds IPv4 rules at the expense of MAC and IPv6 rules
more-ipv4-no-mac-no-ipv6-no-l2	Configure a profile that adds IPv4 rules at the expense of MAC, IPv6, and L2 rules. L2 ether rules are accounted for in the IPv4 group.
more-mac-no-ipv6	Configure a profile that adds MAC rules at the expense of IPv6 rules.
profile-modifier	Specifies modifying the current profile settings.
no-mac	Specifies modifying the current profile, which removes all MAC rules.
`no_mac`	Specifies removing all MAC rules: "enable" or "disable" (default is disabled).
no-ipv4	Specifies modifying the current profile, which removes all IPv4 rules.
`no_ipv4`	Specifies removing all IPv4 rules: "enable" or "disable" (default is disabled).
no-ipv6	Specifies modifying the current profile, which removes all IPv6 rules.
`no_ipv6`	Specifies removing all IPv6 rules: "enable" or "disable" (default is disabled).
no-l2	Modify the current profile that removes all L2 rules. L2 ether rules are accounted for in the first available space from IPv4, IPv6, or MAC group.
`no_l2`	Modifier that removes all L2 rules: enable or disable (default is disabled).

Default

By default, the profile modifier is none.

By default, the profile modifier no-l2 is disabled.

Usage Guidelines

You cannot configure the system to use a new resource profiles while policy is enabled. You must disable policy first.

You cannot configure the system to use a new resource-profile where the profile does not fit with existing defined rules. An error message similar to the following appears:

Current IPv6 rule usage 1 is higher than max value 0 supplied by profile more-mac-no-ipv6

Example

The following example configures the system to use the resource settings of more-ipv4-no-ipv6:

configure policy resource-profile more-ipv4-no-ipv6

History

This command was first available in ExtremeXOS 22.1.

Profile modification ability was added in ExtremeXOS 22.4.

The profiles more-ipv4-no-mac-no-ipv6 and less-acl-more-ipv4-no-mac-no-ipv6 were added in ExtremeXOS 22.4.

The profiles more-ipv4-no-l2 and more-ipv4-no-mac-no-ipv6-no-l2, and profile modifier no-l2 were added in ExtremeXOS 30.2.

Platform Availability

This command is available on all Universal switches supported in this document.