Configure a Classification Rule

About this task

Use this task to create a classification rule associated with a network policy.
  • Configure Device Location rules to assign different switch templates or VLANs within a port type to switches assigned to different locations.
  • Configure Cloud Config Groups (CCGs) to assign a match type that contains or does not contain a specific selection of switches.
  • Configure IP Address classification rules to assign a match type that contains or does not contain a specific IP address associated with a switch.
  • Configure IP Subnet classification rules to assign a match type that contains or does not contain a specific IP subnet associated with a switch(s).
  • Configure IP Range classification rules to assign a match type that contains or does not contain a specific IP range associated with a switch(s).

Procedure

  1. Select the plus sign in the Classification Rules column to add a new classification rule.
  2. Enter a name for the rule.
  3. Enter an optional description.
  4. Select the plus sign and the rule type to configure.
  5. If you selected Device Location, perform the following steps:
    1. Open each location level until you reach the level where the device resides.
    2. Choose Select.
      The location is displayed in the Classification Rule table.
  6. If you selected Cloud Config Group, perform the following steps:
    1. Select the Match Type.
    2. Select an existing group from the drop-down list.
      To add a new group, select the add icon. For more information, see Add a Cloud Config Group.
    3. Select Save Rule.
  7. If you selected IP Address, perform the following steps:
    1. Select the Match Type.
    2. Select an existing IP address from the drop-down list.
      To add a new IP address, select the add icon.
    3. Select Save IP.
  8. If you selected IP Subnet, perform the following steps:
    1. Select the Match Type.
    2. Select an existing IP subnet from the drop-down list.
      To add a new IP subnet, select the add icon.
    3. Select Save Subnet.
  9. If you selected IP Range, perform the following steps:
    1. Select the Match Type.
    2. Select an existing IP range from the drop-down list.
      To add a new IP range, select the add icon.
    3. Select Save IP.
  10. Use the up and down arrows in the Order column to define the order in which the location, cloud config group, IP address, IP subnet, and IP range objects appear.

    These objects are considered using a top-down, first-match, stop-on-match method, so if a device is a member of more than one matching object for an element, only the first match is applied.

  11. Select Save Rule.