Extreme Networks EPICenter 6.0, Справочное руководство

Страница: 484 / 580

Using the Policy Manager
EPICenter Reference Guide
484
By default, the policy list is sorted by policy type. To sort based on the contents of a different column,
click the column header. Clicking a second time reverses the sorting sequence.
To view the specifications for an individual policy, you can do one of the following:
●
Select the policy name in the component tree.
●
Double-click anywhere within the policy entry in the policy list display.
This displays the Policy description page for the selected policy.
Policy Definition Page
The Policy Definition page displays the high-level definition of the selected policy, in terms of the
network elements (users, hosts, and L4 ports as appropriate) that define the traffic flow, and the devices
on which the policy is implemented.
Figure 249 shows the Policy Definition page for an Access-based Security policy.
Direction Indicates whether rules are generated by this policy for traffic in one direction only, or
are generated for traffic in both directions.
• For Access-based Security policies, “network resources to users” indicates traffic
going from the endpoints specified in Network Resources side of the Policy Traffic
area of the Policy Description page, to the endpoints specified in the Users area.
“Users to network resources” indicates traffic flowing from user endpoint(s) to the
network resource endpoint(s). “Bidirectional” indicates that access list rules are
generated for traffic in both directions. The default for these policies is the “users to
network resources direction”. The default choice gives a lower total number of ACLs
since bi-directional requires twice the number of rules as uni-directional.
• For IP policies, “server to client” indicates traffic going from the endpoints specified
in Server side of the Policy Traffic area of the Policy Description page, to the
endpoints specified in the Client area. “Client to server” indicates traffic flowing
from client endpoint(s) to the server endpoint(s). “Bidirectional” indicates that
access list rules are generated for traffic in both directions.
• For Source Port policies, the direction will always be “from source port.”
• For VLAN policies, the direction will always be “from VLAN.”
Description Displays the description, if any, that was entered when the policy was defined.