Matrix NSA Series Configuration Guide
8-1
8
Policy Classification Configuration
This chapter describes the Policy Classification set of commands and how to use them.
8.1
POLICY CLASSIFICATION CONFIGURATION SUMMARY
Matrix Series devices support policy profile-based provisioning of network resources by allowing
IT administrators to:
•
Create, change or remove user profiles based on business-specific use of network services.
•
Permit or deny access to specific services by creating and assigning classification rules which
map user profiles to protocol-based frame filtering policies configured for a particular VLAN or
Class of Service (CoS).
•
Assign or unassign ports to policy profiles so that only ports activated for a profile will be
allowed to transmit frames accordingly.
•
Configure CoS to automatically assign policy-based inbound rate limiters and transmit queues.
•
Set the status of dynamically assigned policy profiles.
NOTE:
It is recommended that you use Enterasys Networks NetSight Atlas Policy
Manager as an alternative to CLI for configuring policy classification on the Matrix
Series devices.
NOTE:
Matrix Series devices also support policy-based routing, which forwards or
drops packets at Layer 3 according to matching access lists (ACLs) in route maps
configured on routing interfaces. For details, refer to
Section 14.3.13
.