Policy Commands

enable policy

disable policy

configure policy vlanauthorization port [port_list | all] [{enable | disable} {tagged | untagged}]

unconfigure policy vlanauthorization [{port port_list} | all]

configure policy invalid action [default-policy | drop | forward]

configure policy port ports admin-id admin_id

configure policy profile profile_index {name name } {pvidpvid } {pvid-status pvid_status } {cos cos} {cos-status cos_status } {egress-vlans egress_vlan_list } {untagged-vlans untagged_vlans } {append | clear} {tcioverwrite tci_overwrite }

configure policy rule admin-profile macsource macsource | portport ] {maskmask } { port-string [port_string | all]} {storage-type [non-volatile | volatile]} {adminpid admin_pid } {tci-overwrite}

configure policy rule profile_index | etherether | ip6destip6dest | ipdestipdest | ipfrag | ipprotoipproto | ipsourcesocketipsourcesocket | iptosiptos | ipttlipttl | macdestmacdest | macsource macsource | portport | tcpdestportIPtcpdestportIP | tcpsourceportIPtcpsourceportIP | udpdestportIP udpdestportIP | udpsourceportIP udpsourceportIP] {maskmask } {port-string [port_string | all]} {storage-type [non-volatile | volatile]} {drop | forward} {coscos}

configure policy maptable [response [tunnel | policy | both] | vlan_list profile_index]

show policy state

show policy allowed-type ports {detail}

show policy capability

show policy dynamic override

show policy invalid [all | {action} {count}]

show policy maptable

show policy profile

show policy rule {all | {profile-index profile_index | admin-profile} ether {etner} ipdest {ipdest} | ipfrag | ipproto {ipproto} | ipsource {ipsource} | iptos {iptos} | ipttl {ipttl} macdest {macdest } | macsource {macsource} | port {port} | tcpdestportIP {tcpdestportIP} | tcpsourceportIP {tcpsourceportIP} | udpdestportIP {udpdestportIP} | udpsourceportIP {udpsourceportIP}} {maskmask} {port-string [port_string | all]} {storage-type [non-volatile | volatile]} {drop | forward} {coscos | admin-pidadmin_pid }}{detail | wide}

show policy vlanauthorization {port port_list}

unconfigure policy all-rules

unconfigure policy maptable [response | vlan_list]

unconfigure policy profile [all | profile_index]

unconfigure policy vlanauthorization [enable | disable]

unconfigure policy rule [profile_index] [all-pid-entries | ipfrag | icmp6type | icmptype | ip6dest | ipdest | ipproto | ipsource | iptos | ipttl | macdest | macsource | port | tcpsourceportIP | udpsourceportIP | tcpdestportIP | udpdestportIP] [all-traffic-entries |data ] {maskmask } {port-string port_string}]