configure policy resource-profile

configure policy resource-profile [default |less-acl [more-ipv4 | more-ipv4-no-ipv6 | more-ipv4-no-mac-no-ipv6] | more-ipv4-no-ipv6 | more-ipv4-no-mac-no-ipv6 | more-mac-no-ipv6] {profile-modifier [{no-mac no_mac} {no-ipv4 no_ipv4} {no-ipv6 no_ipv6}]}

Description

Configures a profile that controls the policy rule resources available for MAC/IPv4/IPv6/L2.

Syntax Description

default	Configure a profile with the default settings.
less-acl	Configure a profile that removes some access list resources to be used for rules.
more-ipv4	Configure a profile that adds IPv4 rules.
more-ipv4-no-ipv6	Configure a profile that adds IPv4 rules at the expense of IPv6 rules.
more-ipv4-no-mac-no-ipv6	Configure a profile that adds IPv4 rules at the expense of MAC and IPv6 rules
more-mac-no-ipv6	Configure a profile that adds MAC rules at the expense of IPv6 rules.
profile-modifier	Specifies modifying the current profile settings.
no-mac	Specifies modifying the current profile, which removes all MAC rules.
no_mac	Specifies removing all MAC rules: "enable" or "disable" (default is disabled).
no-ipv4	Specifies modifying the current profile, which removes all IPv4 rules.
no_ipv4	Specifies removing all IPv4 rules: "enable" or "disable" (default is disabled).
no-ipv6	Specifies modifying the current profile, which removes all IPv6 rules.
no_ipv6	Specifies removing all IPv6 rules: "enable" or "disable" (default is disabled).

Default

By default, the profile modifier is none.

Usage Guidelines

You cannot configure the system to use a new resource profiles while policy is enabled. You must disable policy first.

You cannot configure the system to use a new resource-profile where the profile does not fit with existing defined rules. An error message similar to the following appears:

Current IPv6 rule usage 1 is higher than max value 0 supplied by profile more-mac-no-ipv6

Example

The following example configures the system to use the resource settings of more-ipv4-no-ipv6:

configure policy resource-profile more-ipv4-no-ipv6

History

This command was first available in ExtremeXOS 22.1.

Profile modification ability was added in ExtremeXOS 22.4.

The profiles more-ipv4-no-mac-no-ipv6 and less-acl-more-ipv4-no-mac-no-ipv6 were added in ExtremeXOS 22.4.