Create an Ingress Policy for a Device

An ingress policy (or route map) defines the actions to apply to inbound packets.

1. In the Navigation menu, select Configure.
2. In the Devices panel, select the device for which you want to create a policy.
3. Select the Configuration tab.
4. In the Device Config menu, select Add Policy.
5. In the Name field, enter a name for the policy.
6. In the Policy Type field, select Ingress Policy.
7. In the Rule section, complete the following fields.
   1. Enter a Name for the policy rule.
   2. Select the Sequence in which to apply the rule.
   3. Select a policy Match.

      If you did not create a policy rule match, select Create Match to create the match now.

      You cannot use the same policy rule match multiple times in a policy. Rule match usage is limited to one per policy.

8. In the Egress Group field, select the group to associate with the policy.
9. In the Packet Slicing field, select a value to represent the final packet size after slicing, unless the packet is already smaller than the value you select.
10. In the Advance Scope section, select one of the following:
    • Decap to remove the outer tunnel headers from the packet
    • Scope Shift to move the ACL scope for matching from the outer headers to the inner headers of a tunneled packet
    • None to perform neither action
11. To prevent the rule from being used in the policy, select Deny.
    

    Tip

    This option prevents the rule from being used, but does not delete the configuration of the rule. The rule is skipped and is not used to drop a packet. You can reinstate the rule later without having to reconfigure it.
12. Select Add.
    The rule parameters appear in the pane on the right.
13. Repeat steps 7 through 12 until you have added all the rules you need.
14. Save (✔) your selections.