Create an Egress Policy for a Device

An egress policy (or listener policy) defines the actions to apply to outbound packets.

1. In the Navigation menu, select Configure.
2. In the Devices panel, select the device for which you want to create a policy.
3. Select the Configuration tab.
4. In the Device Config menu, select Add Policy.
5. In the Name field, enter a name for the policy.
6. In the Policy Type field, select Egress Policy.
7. In the Rule section, complete the following fields.
   1. Enter a Name for the policy rule.
   2. Select the Sequence in which to apply the rule.
   3. Select a policy Match.

      If you did not create a policy rule match, select Create Match to create the match now.

      You cannot use the same policy rule match multiple times in a policy. Rule match usage is limited to one per policy.

8. In the Packet Slicing field, select a value to represent the final packet size after slicing, unless the packet is already smaller than the value you select.
9. In the Header Stripping field, select one or more tags to strip: 802.1BR, VLAN, or VN (Virtual NIC).
   The 802.1BR and VN tags cannot coexist in the same policy rule action.
10. In the VLAN field, select the VLAN ID to target the VLAN tag in the egress packet.
11. To remove the outer tunnel headers from the packet, select Decap.
12. To prevent the rule from being used in the policy, select Deny.
    

    Tip

    This option prevents the rule from being used, but does not delete the configuration of the rule. The rule is skipped and is not used to drop a packet. You can reinstate the rule later without having to reconfigure it.
13. Select Add.
    The rule parameters appear in the pane on the right.
14. Repeat steps 7 through 13 until you have added all the rules you need.
15. Save (✔) your selections.