Extreme Networks EPICenter 6.0, Reference Manual

Page: 491 / 580

Creating a New Policy
EPICenter Reference Guide
491
Figure 254: Edit Policy Endpoints window for the Users side of an Access-based Security policy
The left panels of this window, Select Endpoints to be Added , displays the component tree
showing the resources currently defined in the Grouping applet. You can specify endpoints using
any of the available high-level resources: users, hosts, devices, VLANs, or groups of these
resources. The types you select will depend on the type of policy you are creating.
When you select a group in the component tree, its children (groups or individual resources) are
displayed in the associated Resource list (the right half of the
Select Endpoints to be Added
area). Individual resources are displayed only if they are of types that can be used as endpoints
for the policy type you have selected.
The area on the right of the window Current Policy Endpoints , shows the resources that are
already selected as endpoints.
■
Use the Add button to add selected resources to the Current Policy Endpoints list.
■
Use the Add All button to add all the children of the group you have selected in the
component tree.
■
Use the Remove button to remove selected resources from the Current Policy Endpoints list.
■
Use the Remove All button to remove all resources from the Current Policy Endpoints list.
For an IP policy and for the Network Resources side of an Access-based Security policy: There
are two additional ways to create endpoints:
■
Select Add IP Addr to specify an IP address directly. (This button will not appear if you are
creating VLAN or Source Port endpoints.) A small pop-up window appears, in which you can
enter an IP address and subnet mask into the fields provided. A subnet mask of 32 indicates a
host.
■
Select Add Wildcard to add the endpoint specification “Any” to the Current Policy Endpoints
list. This indicates that any IP address will be accepted as a match for this policy endpoint.
(This button does not appear if you are creating VLAN or Source Port endpoints.)
b Click OK to close the Edit window and display the contents of the Current Policy Endpoints list
in the appropriate resource list in the Policy Traffic area.