ONEPolicy Now Supported on New ExtremeSwitching X440-G2 and X620 Series Switches

ONEPolicy, which was released in ExtremexXOS 16.1, allows you create profiles for securing and provisioning network resources based upon the role the user or device plays within the enterprise. By first defining the user or device role, network resources can be tailored to a specific user, system, service, or port-based context by configuring and assigning rules to the policy role. A policy role can be configured for any combination of Class of Service, VLAN assignment, classification rule precedence, or default behavior based upon L2, L3, and L4 packet fields. Hybrid authentication allows either policy or dynamic VLAN assignment, or both, to be applied through RADIUS authorization.

This feature is now supported on the new ExtremeSwitching X440-G2 and X620 series switches.

Supported Platforms

Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X620, X440-G2 series switches

Limitations

  • When stacking switches that have different capacities, the stack goes to the lowest common level of capacities and functionality when possible. If the stack already has an existing configuration that exceeds the new lower capacity, policy disallows the ports on the new switch to become policy-enabled.
  • Only 'macdest', 'macsource', or 'port' policy rules can be applied to QinQ (that is, double-tagged) packets received on an untagged VMAN port.