Extreme Networks ExtremeWare XOS 11.1, Manual

Page: 254 / 496

CLEARFlow
ExtremeWare XOS 11.1 Concepts Guide
254
To enable CLEARFlow, use the following command:
enable clear-flow
When you disable the CLEARFlow agent on the switch, CLEARFlow sampling stops, and all rules are
left in the current state. To disable CLEARFlow, use the following command:
disable clear-flow
NOTE
Any actions triggered while CLEARFlow is enabled will continue when CLEARFlow is disabled, unless explicitly
stopped.
Displaying CLEARFlow Configuration and Activity
To display the state of the CLEARFlow agent, any CLEARFlow policies on each interface, and the
number of CLEARFlow rules, use the following command:
show clear-flow
To display the CLEARFlow rules and configuration, use the following command:
show clear-flow [port <port> | vlan <vlanname> | any] {rule <rulename>} {detail}
Or to display all the rules, use the following command:
show clear-flow rule-all
When CLEARFlow is enabled, any rules that satisfy the threshold will trigger and take action. To
display the CLEARFlow rules that have been triggered, use the following command:
show clear-flow rule-triggered
To display which ACLs have been modified by CLEARFlow rules, use the following command:
show clear-flow acl-modified
Adding CLEARFlow Rules to ACLs
As described in the chapter about ACLs, each ACL policy file consists of a number of named entries.
Each entry consists of match conditions and actions to take if the entry is matched. CLEARFlow builds
on the ACL concept to include rules that are periodically checked, and actions to take if a rule is
triggered. The CLEARFlow entries are similar to the ACL entries.
The syntax of a CLEARFlow rule entry is:
entry <CLFrulename> {
if { <match-conditions>;
}
then {
<actions>;
}
}