Extreme Networks EPICenter 5.0, Руководство пользователя

Страница: 157 / 208

Policy Named Components
EPICenter Concepts and Solutions Guide 157
Figure 71: EPICenter Policy Manager components
The following components are used within the EPICenter Policy Manager:
• Groups: Group resources (except for Device Groups) are created in the Grouping Manager. A group
can contain devices, ports, custom applications, VLANs, users, hosts, as well as other groups as
members. When you use a group in a policy definition, such as to define a traffic endpoint, the
Policy Manager looks through the group and its subgroups, and uses in the policy definition only
the resources of types that are valid for the policy you are creating.
• Devices (by name): Devices are entered into the EPICenter database through the Inventory Manager
(Discovery or Add Devices), or the DevCLI utility, and are mapped to IP addresses in the EPICenter
database. Devices are assigned to Device Groups in the Inventory Manger. They can also be added
as members to other groups through the Grouping Manager.
• Device Groups : Device Groups are created within the Inventory Manager, and devices are assigned
as members through that same applet. All devices are members of a device group. Device groups
can themselves be added as members of other groups, through the Grouping Manager.
• Hosts (by name): Host are entered into the EPICenter database through the Grouping Manager,
either using the Import capability or through the GUI. A Host to IP address mapping can be
established in several ways. The IP address can be added as a component attribute through the GUI
or as part of the Import function. Alternatively, the mapping can be obtained through a name lookup
service such as DNS. Within the Policy server, IP addresses are mapped to physical ports on an
Extreme switch using DLCS, or through relationships created in the Grouping Manager. Hosts can be
added as members of groups through the Grouping Manager.
• Applications : Applications are named components (such as Baan, FTP, HTTP) that map to a layer 4
protocol and port. A set of applications (with protocol and port mappings) are predefined in the
EPICenter database. You can also import application definitions through the Grouping Manager
Import function. These definitions appear only in the Policy Manager for an IP QoS policy.
• Custom Applications: These are user defined applications and consist of collections of L4 ports. A
custom application can consist of a mixture of UDP and TCP ports in any combination of single
XM_020A
GUI
Policy
named
components
Policy primitive components
System System
GUI
import
GUI
import
Netlogin/DLCS
GUI
import
Netlogin/DLCS
GUI
import
DNS
GUI
import
GUI
import
Group
Device
group
Host Application
Device
as a Host
L4 /
L4 range
IP/subnet VLAN QoS profile
Device
port
User